ਇਹ ਪੁਰਾਣਾ ਵਰਜ਼ਨ ਹੈ। ਨਵਾਂ ਵਰਜ਼ਨ 26.12.1 ਹੈ। Node.js 26.12.1 · ਰਿਲੀਜ਼:
26.5.1, 26 (Upcoming LTS) ਲਾਈਨ ਦਾ ਹਿੱਸਾ ਹੈ, ਜਿਸ ਨੂੰ 30 ਅਪ੍ਰੈਲ 2029 ਤੱਕ ਸਪੋਰਟ ਮਿਲੇਗੀ। endoflife.date
ਇੰਸਟਾਲਰ ਫ਼ਾਈਲਾਂ 26.5.1
| ਆਰਕੀਟੈਕਚਰ | ਕਿਸਮ | ਕਿਸ ਲਈ | ਫ਼ਾਈਲ ਦਾ ਆਕਾਰ | ਡਾਊਨਲੋਡ | SHA256 |
|---|---|---|---|---|---|
| 64-ਬਿੱਟ | MSI | ਸਾਰੇ ਯੂਜ਼ਰ | — | nodejs.org | VirusTotal |
| 64-ਬਿੱਟ | ZIP → ਪੋਰਟੇਬਲ | — | — | nodejs.org | VirusTotal |
| ARM64 | MSI | ਸਾਰੇ ਯੂਜ਼ਰ | — | nodejs.org | VirusTotal |
| ARM64 | ZIP → ਪੋਰਟੇਬਲ | — | — | nodejs.org | VirusTotal |
ਲਿੰਕ ਅਤੇ SHA256, Windows Package Manager ਦੇ ਕਮਿਊਨਿਟੀ ਮੈਨੀਫ਼ੈਸਟਾਂ ਤੋਂ ਲਏ ਗਏ ਹਨ। ਫ਼ਾਈਲ ਚਲਾਉਣ ਤੋਂ ਪਹਿਲਾਂ ਉਸ ਦਾ ਹੈਸ਼ ਮਿਲਾ ਕੇ ਦੇਖੋ।
ਰਿਲੀਜ਼ ਨੋਟਸ
This is a security release.
Notable Changes
- (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
- (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
- (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
- (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
- (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) – Medium
- (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
- (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
- (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
- (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
- (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
- deps: update llhttp to 9.4.3 (Paolo Insogna)
- deps: update undici to 8.9.0 (Node.js GitHub Bot)
Commits
- [af0bf96877] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935
- [0354678355] - deps: update undici to 8.9.0 (Node.js GitHub Bot) #64712
- [dbeeaeec13] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929
- [064d339f56] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#922
- [23b94c843a] - (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) nodejs-private/node-private#921
- [c7ec3dc0b9] - (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) nodejs-private/node-private#904
- [8f666925b1] - (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) nodejs-private/node-private#930
- [ad99d075b1] - (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) nodejs-private/node-private#911
- [61222008b7] - (CVE-2026-58039) permission: check final report output path (RafaelGSS) nodejs-private/node-private#908
- [3cb607dfc4] - (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) nodejs-private/node-private#924
- [d08fde8a16] - (CVE-2026-58041) sqlite: invalidate tag store iterators on statement reset (Matteo Collina) nodejs-private/node-private#896
- [b3fbb6e11f] - (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) nodejs-private/node-private#931
