2645dc7372This is a security release. Notable changes: build,test,deps: * (CVE-2026-21717) test array index hash collision crypto: * (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC http: * (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct permission: * (CVE-2026-21716) include permission check on lib/fs/promises * (CVE-2026-21715) add permission check to realpath.native src: * (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code tls: * (CVE-2026-21637) wrap SNICallback invocation in try/catch PR-URL: https://github.com/nodejs-private/node-private/pull/844 |
||
|---|---|---|
| .. | ||
| CHANGELOG_ARCHIVE.md | ||
| CHANGELOG_IOJS.md | ||
| CHANGELOG_V4.md | ||
| CHANGELOG_V5.md | ||
| CHANGELOG_V6.md | ||
| CHANGELOG_V7.md | ||
| CHANGELOG_V8.md | ||
| CHANGELOG_V9.md | ||
| CHANGELOG_V10.md | ||
| CHANGELOG_V010.md | ||
| CHANGELOG_V11.md | ||
| CHANGELOG_V12.md | ||
| CHANGELOG_V012.md | ||
| CHANGELOG_V13.md | ||
| CHANGELOG_V14.md | ||
| CHANGELOG_V15.md | ||
| CHANGELOG_V16.md | ||
| CHANGELOG_V17.md | ||
| CHANGELOG_V18.md | ||
| CHANGELOG_V19.md | ||
| CHANGELOG_V20.md | ||
| CHANGELOG_V21.md | ||
| CHANGELOG_V22.md | ||