Node.js schedules security releases for 21 October across 26.x, 24.x and 22.x
Serguey Asael Shinder1 min readThe Node.js project announced on 14 October 2026 that it will publish security releases on or shortly after Wednesday, 21 October 2026. New versions are planned for the 26.x, 24.x and 22.x release lines.
Severity. The announcement says the highest-severity issue fixed in each of the three lines is rated HIGH. It does not describe the vulnerabilities, the affected components or CVE numbers.
End-of-life lines. The project notes that end-of-life versions are always affected when a security release occurs, and points users to the release schedule to stay on a supported version. It adds that commercial support for versions past the Maintenance LTS phase is available through partners of the OpenJS Ecosystem Sustainability Program.
What to do before 21 October. The post gives no workaround; it points to the security policy at nodejs.org/en/security and to the low-volume nodejs-sec announcement list for updates. At the time of the announcement the current lines on nodejs.org were v24.22.0 (LTS) and v26.12.0 (Current).
Source: Node.js, "Wednesday, October 21, 2026 Security Releases" — https://nodejs.org/en/blog/vulnerability/october-2026-security-releases