Rafael Gonzaga
2025-07-15, Version 24.4.1 (Current), @RafaelGSS
This is a security release.
Notable Changes
- (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
- (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Commits
- [
c33223f1a5] - (CVE-2025-27209) deps: V8: revert rapidhash commits (Michaël Zasso) nodejs-private/node-private#713 - [
56f9db2aaa] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#721
Windows 64-bit Installer: https://nodejs.org/dist/v24.4.1/node-v24.4.1-x64.msi
Windows ARM 64-bit Installer: https://nodejs.org/dist/v24.4.1/node-v24.4.1-arm64.msi
Windows 64-bit Binary: https://nodejs.org/dist/v24.4.1/win-x64/node.exe
Windows ARM 64-bit Binary: https://nodejs.org/dist/v24.4.1/win-arm64/node.exe
macOS 64-bit Installer: https://nodejs.org/dist/v24.4.1/node-v24.4.1.pkg
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-darwin-arm64.tar.gz
macOS Intel 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-darwin-x64.tar.gz
Linux 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-linux-x64.tar.xz
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-linux-ppc64le.tar.xz
Linux s390x 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-linux-s390x.tar.xz
AIX 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-aix-ppc64.tar.gz
ARMv8 64-bit Binary: https://nodejs.org/dist/v24.4.1/node-v24.4.1-linux-arm64.tar.xz
Source Code: https://nodejs.org/dist/v24.4.1/node-v24.4.1.tar.gz
Other release files: https://nodejs.org/dist/v24.4.1/
Documentation: https://nodejs.org/docs/v24.4.1/api/
SHASUMS
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
d2b3496c3795515844bd8d2d45404d0e8ddbc714855ce68e895a644a6059feb3 node-v24.4.1-aix-ppc64.tar.gz
7a3cdd9f5d8f0cb4dce7b21f509b5379bb51fd18e5dfa6a9662cafcd8ae63c60 node-v24.4.1-arm64.msi
55a772a600b7bdafb4b35945b3935090e27aff9934b4c11b281220fcd99139d7 node-v24.4.1-darwin-arm64.tar.gz
7ea25548b120ebaeaffadd37878b83c3d917cbb1eb3e9dbab7cb861bd8763a56 node-v24.4.1-darwin-arm64.tar.xz
59fbad953a0705e78d220079fb6d10d341d0a61afd3aeb4db2a87207fddd8944 node-v24.4.1-darwin-x64.tar.gz
e391194c578cf91e2af35acb30dc6c23fe8893fb3409a2c9a4e25b51f87a6cb0 node-v24.4.1-darwin-x64.tar.xz
f2071f773135460a56c6cdc368a58e98f5f3d14e3a0bf1010a4323d294482740 node-v24.4.1-headers.tar.gz
5cc534bca66b184c837923ce5d9cc25ae7f3b3f6d8455ded509da0db041c16d7 node-v24.4.1-headers.tar.xz
fde5421e2652e51199bc678e1e6c4d80bbb4c55337ec0a82206568517e9792ef node-v24.4.1-linux-arm64.tar.gz
555659c36fc72d0617e278b5d26ffcaebc3760a3de354926b1e5f1b0bfd66083 node-v24.4.1-linux-arm64.tar.xz
b4ee745e4d8a2c3f3a793a50695d769322b81c79f2b7b79c2a359bca892a0f36 node-v24.4.1-linux-ppc64le.tar.gz
2d549d5c63d282012192bf8594ea105b9876e9198d3af8401c61efe15c3d8cb1 node-v24.4.1-linux-ppc64le.tar.xz
8c9a680c3ae7c8b4a02f55faa055d960ab639a67b257efe7a466d49934746630 node-v24.4.1-linux-s390x.tar.gz
70316824c88fa396b12363fb9695b8f9a88f671377056bd86761dc96962240f8 node-v24.4.1-linux-s390x.tar.xz
063f2eb299ba60e3fc9b424d8e87d0e2f6be84b39bdeadc421ee2865914c498b node-v24.4.1-linux-x64.tar.gz
7e067b13cd0dc7ee8b239f4ebe1ae54f3bba3a6e904553fcb5f581530eb8306d node-v24.4.1-linux-x64.tar.xz
a9e19728d981b03fd0ef075d6df0dc28c9d543f4b2ea6cad5cb1e3dff5c01e11 node-v24.4.1-win-arm64.7z
8cb993d89d13119f582c77a4c734be5bdfeee5557e6cfe850ea1a2f23fa94686 node-v24.4.1-win-arm64.zip
daa849d978dfd6ae623e2c70cab5602b385e2c1e6bb3b5012de6609be78ddcdc node-v24.4.1-win-x64.7z
0428a6ca7544df310de4ed12c10e84c0bc7c9022945dc16de22f7c0dc4893dd2 node-v24.4.1-win-x64.zip
521032573be257d214589043d4aa57d1e32a0a4ff8e30c3275e6617de4c55ee4 node-v24.4.1-x64.msi
3473b9ebee25cc0681f543b93586988a2379836bf2be5a47c159a5920289e032 node-v24.4.1.pkg
f5d4525390f67bd2ba91efe2ad94722f570a9a4fd18756ab420cb5885d0f6c10 node-v24.4.1.tar.gz
adb79ca0987486ed66136213da19ff17ef6724dcb340c320e010c9442101652f node-v24.4.1.tar.xz
da416aa539b6b84d20c58b2bbd1fc5fc74b2d95dad213ef49110f697cbb2bb33 win-arm64/node.exe
6809fc156673d10cca7dff0e54f28309bb111d235c54493a4a0ca401c2113be7 win-arm64/node.lib
de892d4574417946a45e95720cb3a802eaa51209219ddd8a4fd36f8e6de6b7ef win-arm64/node_pdb.7z
62a4b97ca6aaa558fc2d7dba98a16faac64ec60776d5b4a519d515e2a7340c53 win-arm64/node_pdb.zip
1b41336fc188453644a3986ddc508627e2c7288df74e7c86abfc46106bc603e3 win-x64/node.exe
34882ca2bb450431047f2dd3bae1c3b8c1cd2b4cffd5c1a0bf079948846d2b83 win-x64/node.lib
759fbb25d32aaed69069b48b32844a161264d01aec457a91c3ca735b95131d2d win-x64/node_pdb.7z
57e04e1121f8e5b29739697e54ab07f51f70dab0376c94f9a9f159b412d32ba0 win-x64/node_pdb.zip
-----BEGIN PGP SIGNATURE-----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=ZLrr
-----END PGP SIGNATURE-----