nodejs avatar

Node.js Release Notes & Changelog

nodejs/node

The latest Node.js release is v26.13.0, published on .

Node.js JavaScript runtime ✨🐢🚀✨

123,238 starsJavaScriptv26.13.0
nodejsjavascriptnodejsruntimemitlinuxmacos
Get notified of new Node.js releasesOfficial releases on GitHub

Node.js release notes

Node.js v27.0.0-alpha.0.0.0

2026-10-29, Version 27.0.0-alpha.0.0.0 (Alpha), @RafaelGSSPre-release
Official release notes

Notable Changes

V8 15.6

The V8 engine is updated to version 15.6.75.13, up from 14.6 in Node.js 26. Highlights:

  • New language features enabled by default: Math.sumPrecise(), Intl.Locale.prototype.variants, Iterator.prototype.join(), Iterator.prototype.includes(), Iterator.zip() and Iterator.zipKeyed().
  • Experimental features behind flags: import defer (--js-defer-import-eval), Immutable ArrayBuffer (--js-immutable-arraybuffer) and RegExp buffer boundaries (--js-regexp-buffer-boundaries).

Node.js v24.22.2

2026-10-28, Version 24.22.2 'Krypton' (LTS), @aduh95
Official release notes

Commits

Node.js v26.13.0

2026-10-28, Version 26.13.0 'Lithium' (LTS), @richardlauLatest
Official release notes

Notable Changes

This release marks the transition of Node.js 26.x into Long Term Support (LTS)
with the codename 'Lithium'. It will continue to receive updates through to
the end of April 2029.

Other than updating metadata, such as the process.release object, to reflect
that the release is LTS, no further changes from Node.js 26.12.1 are included.

If you are updating from an earlier Long Term Support release (e.g. Node.js 24
or 22 or earlier) please note that since Node.js 25 the official binaries for
Linux are linked against libatomic, which may need to be installed separately
depending on your

Node.js v22.23.4

2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95
Official release notes

This is a security release.

Notable Changes

  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)

Node.js v24.22.1

2026-10-21, Version 24.22.1 'Krypton' (LTS), @aduh95
Official release notes

This is a security release.

Notable Changes

  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell)
  • (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
  • (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
  • (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)

Node.js v26.12.1

2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS
Official release notes

This is a security release.

Notable Changes

  • (CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High
  • (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High
  • (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High
  • (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High
  • (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov) – High
  • (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) – Medium

Node.js v26.12.0

2026-10-14, Version 26.12.0 (Current), @richardlau
Official release notes

Notable Changes

  • [1ebd6d3677] - (SEMVER-MINOR) doc,lib,src: throw on missing WebAssembly or RX support (Paolo Insogna) #66533
  • [7f1937d2b9] - (SEMVER-MINOR) http: add websocketMask() and websocketUnmask() (James M Snell) #66335

Commits

  • [30e76bb16a] - benchmark: fix input passed to subtle.digest in webcrypto-digest (Rafael Gonzaga) #66608
  • [adef72223a] - benchmark: fix buffer option in buffer read/write benchmarks (Rafael Gonzaga) #66604
  • [2f498f08fe] - benchmark: add util.parseArgs benchmark (Rafael Gonzaga) #66599

Node.js v24.22.0

2026-10-14, Version 24.22.0 'Krypton' (LTS), @richardlau prepared by @aduh95
Official release notes

Notable Changes

  • [ddbf974b47] - (SEMVER-MINOR) crypto: add crypto.parsePKCS12() (Brian Muenzenmeyer) #65627
  • [c162c68ff0] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
  • [a4ab3d84d7] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
  • [c2f1e829ea] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
  • [51aad5a80d] - (SEMVER-MINOR) crypto: enable SIV and GCM-SIV modes in Cipher/Decipher APIs (Filip Skokan) #63411
  • [d11c65d2f2] - doc: add araujogui to collaborators (Guilherme Araújo) #66090

Node.js v26.11.1

2026-10-07, Version 26.11.1 (Current), @aduh95
Official release notes

Commits

  • [2dc4638e85] - Revert "build: toggle doc-kit verbosity based on V" (Antoine du Hamel)
  • [3febbc54ec] - Revert "build, doc: move to redesign" (Antoine du Hamel)
  • [173250e2e7] - Revert "tools: bump the doc group in /tools/doc with 4 updates" (Antoine du Hamel)

Node.js v26.11.0

2026-10-07, Version 26.11.0 (Current), @aduh95
Official release notes

Notable Changes

  • [232f178825] - (SEMVER-MINOR) buffer: add isLatin1 (James M Snell) #66298
  • [27778036de] - (SEMVER-MINOR) buffer: add Buffer.stringLength() (Matteo Collina) #66064
  • [4f84c4bda2] - build, doc: move to redesign (Aviv Keller) #62045
  • [6f6296fef9] - (SEMVER-MINOR) doc: promote Alpine Linux to tier 2 support (Stewart X Addison) #63737
  • [e998d260d0] - (SEMVER-MINOR) http: add isValidHeaderName() and isValidHeaderValue() (James M Snell) #66334
  • [7702a50e08] - (SEMVER-MINOR) http2: add connectionWindowSize option (Tim Perry) #65619

Looking for an older version? The full Node.js changelog is on the official nodejs/node releases page.

How to get notified of new Node.js releases

Stay updated when Node.js ships a new version. With GitWatchman, you can monitor nodejs/node and receive the full release notes by email, Slack, Discord or Telegram whenever a new version is published.

  1. Sign in with your GitHub or Google account at gitwatchman.com
  2. Add nodejs/node to your monitored repositories
  3. Get an alert with the release notes for every new version

You can also subscribe to the RSS feed for Node.js releases (see our GitHub release RSS guide), follow Node.js pre-releases and betas, or compare the best GitHub release trackers.

Related projects to track

Get notified of new Node.js releases

One alert per release with the full notes, by email, Slack, Discord or Telegram. Free for up to 5 repositories.

Track Node.js for free