This is an older version. The current version is 26.12.1. Node.js 26.12.1 · Released:
24.4.1 is part of the 24 (LTS) line, supported until April 30, 2028. endoflife.date
Installer files 24.4.1
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | MSI | All users | — | nodejs.org | VirusTotal |
| 64-bit | ZIP → Portable | — | — | nodejs.org | VirusTotal |
| ARM64 | MSI | All users | — | nodejs.org | VirusTotal |
| ARM64 | ZIP → Portable | — | — | nodejs.org | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
This is a security release.
Notable Changes
- (CVE-2025-27209) HashDoS in V8 with new RapidHash algorithm
- (CVE-2025-27210) Windows Device Names (CON, PRN, AUX) Bypass Path Traversal Protection in path.normalize()
Commits
- [c33223f1a5] - (CVE-2025-27209) deps: V8: revert rapidhash commits (Michaël Zasso) nodejs-private/node-private#713
- [56f9db2aaa] - (CVE-2025-27210) lib: handle all windows reserved driver name (RafaelGSS) nodejs-private/node-private#721
