دا یوه زړه نسخه ده. اوسنۍ نسخه 18.20.8 ده. Node.js 18 18.20.8 · د خپرېدو نېټه:
د نصب فایلونه 18.18.2
| جوړښت | ډول | د نصب ساحه | د فایل اندازه | ډاونلوډ | SHA256 |
|---|---|---|---|---|---|
| 64-bit | MSI | ټول کارنان | — | nodejs.org | VirusTotal |
| 64-bit | ZIP → پورټېبل | — | — | nodejs.org | VirusTotal |
| 32-bit | MSI | ټول کارنان | — | nodejs.org | VirusTotal |
| 32-bit | ZIP → پورټېبل | — | — | nodejs.org | VirusTotal |
لینک او SHA256 د Windows Package Manager د ټولنې له مانیفسټ څخه اخیستل شوي. د ډاونلوډ شوي فایل له چلولو مخکې یې هش پرتله کړئ.
د خپرونې یادښتونه
This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-44487: nghttp2 Security Release (High)
- CVE-2023-45143: undici Security Release (High)
- CVE-2023-38552: Integrity checks according to policies can be circumvented (Medium)
- CVE-2023-39333: Code injection via WebAssembly export names (Low)
More detailed information on each of the vulnerabilities can be found in October 2023 Security Releases blog post.
Commits
- [55028468db] - deps: update undici to v5.26.3 (Matteo Collina) #50153
- [a792bbc515] - deps: update nghttp2 to 1.57.0 (James M Snell) #50121
- [f6444defa4] - deps: update nghttp2 to 1.56.0 (Node.js GitHub Bot) #49582
- [7e9b08dfd4] - deps: update nghttp2 to 1.55.1 (Node.js GitHub Bot) #48790
- [85672c153f] - deps: update nghttp2 to 1.55.0 (Node.js GitHub Bot) #48746
- [300a902422] - deps: update nghttp2 to 1.53.0 (Node.js GitHub Bot) #47997
- [7d83ed0bf6] - Revert "deps: update nghttp2 to 1.55.0" (Richard Lau) #50151
- [1193ca5fdb] - lib: let deps require node prefixed modules (Matthew Aitken) #50047
- [eaf9083cf1] - module: fix code injection through export names (Tobias Nießen) nodejs-private/node-private#461
- [1c538938cc] - policy: use tamper-proof integrity check function (Tobias Nießen) nodejs-private/node-private#462
