Marco Ippolito
2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito
This is a security release.
Notable Changes
- (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797
- (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748
- (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759
- (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796
Commits
- [
2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997 - [
3e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #61283 - [
4ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797 - [
89adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748 - [
7302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760 - [
ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773 - [
20075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759 - [
20591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796
Windows 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0-arm64.msi
Windows 64-bit Binary: https://nodejs.org/dist/v24.13.0/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v24.13.0/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v24.13.0/node-v24.13.0.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-aix-ppc64.tar.gz
ARMv8 64-bit Binary: https://nodejs.org/dist/v24.13.0/node-v24.13.0-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v24.13.0/node-v24.13.0.tar.gz
Other release files: https://nodejs.org/dist/v24.13.0/
Documentation: https://nodejs.org/docs/v24.13.0/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
ac21e9af08a4d54b057d800c03bc95322946952b8daa811cada98bfb66a8ce8f node-v24.13.0-aix-ppc64.tar.gz
9ef67a1cc2b64de38bdd6139d7967699915312df37e9b176277631165e39798d node-v24.13.0-arm64.msi
d595961e563fcae057d4a0fb992f175a54d97fcc4a14dc2d474d92ddeea3b9f8 node-v24.13.0-darwin-arm64.tar.gz
c59a517e9147f25c6167426875a571432f1478c1d7ee7ecc10baa46b0d0e8545 node-v24.13.0-darwin-arm64.tar.xz
6f03c1b48ddbe1b129a6f8038be08e0899f05f17185b4d3e4350180ab669a7f3 node-v24.13.0-darwin-x64.tar.gz
4ca0a48233f091a2a69ec28dd58e59f394a1b2d4f052b6c6b10f760377fe266f node-v24.13.0-darwin-x64.tar.xz
f5589e2b4b962af05381a31d11c3c9b004daf8bd63c95c0e1a406600daa8ae88 node-v24.13.0-headers.tar.gz
9344eddda6621e46d77b26f1b93db25a52592f9eb199f300440fe3c30802f186 node-v24.13.0-headers.tar.xz
0f6d40b94c6a2eb6b4c240ffc8b9fd3ada7ab044c177dd413c06e1ef9a63f081 node-v24.13.0-linux-arm64.tar.gz
aa881151bd0f9f154a0424dd60a72e9ce10672619121658c278a24327ef46831 node-v24.13.0-linux-arm64.tar.xz
18011930b182a1c5b49d2326191fdba58270bdf7b45b8c7df855ef31931b148a node-v24.13.0-linux-ppc64le.tar.gz
babe8c72871c751ed288fc1a1aeb2a95d830f732e43d9e4ab0cf137e3273eb8e node-v24.13.0-linux-ppc64le.tar.xz
5744610b624f2e82ae1ca279d8ece7b8ca466437239533d2d033565303bc1d39 node-v24.13.0-linux-s390x.tar.gz
75f6f780442b7b98a357fd9cf6e383c3d22a8efe9ed4ee1d54ea68ff16889904 node-v24.13.0-linux-s390x.tar.xz
6223aad1a81f9d1e7b682c59d12e2de233f7b4c37475cd40d1c89c42b737ffa8 node-v24.13.0-linux-x64.tar.gz
e798599612f4bb71333a3397ab0d095fd62214e115aea45aa858a145fc72d67e node-v24.13.0-linux-x64.tar.xz
b62d61eb92a1fdcc3fc4951fc087f206eb6f46d088bd9a6630892f4eb5203d13 node-v24.13.0.pkg
54cb58921b4ce2831c6690ee823a3d39cfbf2b75f4e556c4c2bde90f3d8fd1ca node-v24.13.0.tar.gz
320fe909cbb347dcf516201e4964ef177b8138df9a7f810d0d54950481b3158b node-v24.13.0.tar.xz
724fcf1a20ea345cc38fb970044a6f1617a1dc47e477ee5a92fe8b243b95700a node-v24.13.0-win-arm64.7z
92b9f9b0c0c123e11e4afc535f0ec19cd987465eea506427553a49971364158a node-v24.13.0-win-arm64.zip
04d3619e21c07a84043accbacc73256431c6adbea65d4c026c6eb22ff6fd453a node-v24.13.0-win-x64.7z
ca2742695be8de44027d71b3f53a4bdb36009b95575fe1ae6f7f0b5ce091cb88 node-v24.13.0-win-x64.zip
1a5f0cd914386f3be2fbaf03ad9fff808a588ce50d2e155f338fad5530575f18 node-v24.13.0-x64.msi
91e25b2ef61ee30a9e6afce0f336b4d55d688c3717244e496fa11d69fc3a1717 win-arm64/node.exe
afef88b389be8ac30974d2cf69de26001f95f1e9efe1811f2e8467c4cdfe05d0 win-arm64/node.lib
4e3e5e11d6c60e66f65e1292bf524afeb6293f3d96ffdfbbe6756287be307e78 win-arm64/node_pdb.7z
087c7cf72188ce884288ddcd818f799f76e20ee1a1536d624e3f5baea1313c05 win-arm64/node_pdb.zip
d14ba95cdce1ef7dc9ad3ac74949ca5db38b27378ee30f30a23cf26f9e875a11 win-x64/node.exe
be205f2934c17fbd56ce6cdfcfbeb2f6a85061d5141e7a58eba240a8477a12fd win-x64/node.lib
1120267174deb5e7661e5b9b0a291e55c1937155e1dedd85018cb83eb48f466c win-x64/node_pdb.7z
e96ce3ea96ff4067f7cbeece8fe11a06f925676e956859a86e7421d325080eb1 win-x64/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=vpzY
-----END PGP SIGNATURE-----