2025-07-15, Version 24.4.1 (Current), @RafaelGSS

RafaelGSS released this 15 Jul 22:17

· 2111 commits to main since this release

cf6b5c2

This is a security release.

Notable Changes

(CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
(CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()

Commits

[c33223f1a5] - (CVE-2025-27209) deps: V8: revert rapidhash commits (Michaël Zasso) nodejs-private/node-private#713
[56f9db2aaa] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#721

Assets 2