Nodejs security advisory (AV26-277)

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial number: </strong>AV26-277<br /><strong>Date: </strong>March 25, 2026</p>

On March 24, 2026, Nodejs published security advisories to address vulnerabilities in the following products:

  • Node.js 20 – versions prior to v20.20.2 (LTS)
  • Node.js 22 – versions prior to v22.22.2 (LTS)
  • Node.js 24 – versions prior to v24.14.1 (LTS)
  • Node.js 25 – versions prior to v25.8.2 (Current)

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

</div>

Article Link: Nodejs security advisory (AV26-277) - Canadian Centre for Cyber Security