This is an older version. The current version is 18.20.8. Node.js 18 18.20.8 · Released:
Installer files 18.20.4
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | MSI | All users | — | nodejs.org | VirusTotal |
| 64-bit | ZIP → Portable | — | — | nodejs.org | VirusTotal |
| 32-bit | MSI | All users | — | nodejs.org | VirusTotal |
| 32-bit | ZIP → Portable | — | — | nodejs.org | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
This is a security release.
Notable Changes
- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
Commits
- [85abedf1ff] - lib,esm: handle bypass network-import via data: (RafaelGSS) nodejs-private/node-private#522
- [eccd63b865] - src: handle permissive extension on cmd check (RafaelGSS) nodejs-private/node-private#596
