winget install --id OpenJS.NodeJS.21About Node.js 21
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
What's new in 21.7.3
This is a security release. Notable Changes - CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows Commits - [9095c914ed] - src: disallow direct .bat and .cmd file spawning (Ben Noordhuis) nodejs-private/node-private#562
Version history
| Version | Updated | Notes |
|---|---|---|
| 21.7.3 | Unknown | This is a security release. Notable Changes - CVE-2024-27980 - Command injection via args parameter of child_process.spawn without shell option enabled on Windows Commits - [9095c914ed] - src: disallow direct .bat and .c... |
| 21.7.2 | Unknown | This is a security release. Notable changes - CVE-2024-27983 - Assertion failed in nodehttp2Http2Session::~Http2Session() leads to HTTP/2 server crash- (High) - CVE-2024-27982 - HTTP Request Smuggling via Content Length... |
| 21.7.1 | Unknown | Notable Changes This release reverts #51389, which landed in Node.js 21.7.0. It is a documented feature that t.after() hooks are run even if a test has no subtests. The hook can be used to clean up the test itself. Commi... |
| 21.7.0 | Unknown | Release notes |
| 21.6.2 | Unknown | Notable changes This is a security release. Notable changes - CVE-2024-21892 - Code injection and privilege escalation through Linux capabilities- (High) - CVE-2024-22019 - http: Reading unprocessed HTTP request with unb... |
| 21.6.1 | Unknown | Notable Changes This release fixes a bug in undici using WebStreams Commits - [662ac95729] - Revert "stream: fix cloned webstreams not being unref'd" (Matteo Collina) #51491 - [1b8bba8aee] - test: add regression test for... |
| 21.6.0 | Unknown | Release notes |
| 21.4.0 | Unknown | Notable Changes This release fixes a regression introduced in v21.3.0 that caused the fs.writeFileSync method to throw when called with 'utf8' encoding, no flag option, and if the target file didn't exist yet. - [32acafe... |
| 21.3.0 | Unknown | Release notes |
| 21.2.0 | Unknown | Release notes |
| 21.1.0 | Unknown | Notable Changes Automatically detect and run ESM syntax The new flag --experimental-detect-module can be used to automatically run ES modules when their syntax can be detected. For “ambiguous” files, which are .js or ext... |