Node.js — Tuesday, January 21, 2025 Security Releases

Updates are now available for the 23.x, 22.x, 20.x, 18.x Node.js release lines for the following issues. This security release includes the following dependency updates to address public vulnerabilities: undici (v7.2.3, v6.21.1, v5.28.5) on v23.x, v22.x, v20.x, v18.x. Along with the security fixes, the Node.js team has also issued CVEs for End-of-Life (EOL) versions of Node.js. Node.js v17.x or prior CVE-2025-23087 Node.js v19.x CVE-2025-23088 Node.js v21.x CVE-2025-23089 More information in this blog post.