這是舊版本，目前最新版本為22.23.4。 Node.js 22 22.23.4 · 發行日期:
安裝檔 22.22.2
| 架構 | 類型 | 安裝範圍 | 檔案大小 | 下載 | SHA256 |
|---|---|---|---|---|---|
| 64位元 | MSI | 所有使用者 | — | nodejs.org | VirusTotal |
| ARM64 | MSI | 所有使用者 | — | nodejs.org | VirusTotal |
| 32位元 | MSI | 所有使用者 | — | nodejs.org | VirusTotal |
下載連結與SHA256取自Windows套件管理員（winget）的社群資訊清單。執行前請先核對下載檔案的雜湊值。
更新紀錄
This is a security release.
Notable Changes
- (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
- (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
- (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
- (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
- (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
- (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
- (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Commits
- [6f14ee5101] - (CVE-2026-21717) build,test: test array index hash collision (Joyee Cheung) nodejs-private/node-private#809
- [52a52ef619] - (CVE-2026-21713) crypto: use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) nodejs-private/node-private#822
- [30a3ab11e2] - (CVE-2026-21717) deps: V8: cherry-pick aac14dd95e5b (Joyee Cheung) nodejs-private/node-private#809
- [e3f4d6a42e] - (CVE-2026-21717) deps: V8: backport 1361b2a49d02 (Joyee Cheung) nodejs-private/node-private#809
- [7dc00fa5f4] - (CVE-2026-21717) deps: V8: backport 185f0fe09b72 (Joyee Cheung) nodejs-private/node-private#809
- [076acd052d] - (CVE-2026-21717) deps: V8: backport 0a8b1cdcc8b2 (snek) nodejs-private/node-private#809
- [963c60a951] - deps: V8: override depot_tools version (Richard Lau) #62344
- [a688117d5d] - deps: upgrade npm to 10.9.7 (npm team) #62330
- [859c8c761b] - deps: update undici to v6.24.1 (Matteo Collina) #62285
- [d5ed384a2f] - deps: upgrade npm to 10.9.6 (npm team) #62215
- [a2fe9fd81a] - (CVE-2026-21710) http: use null prototype for headersDistinct/trailersDistinct (Matteo Collina) nodejs-private/node-private#821
- [73deff77c1] - lib: backport _tls_common and _tls_wrap refactors (Dario Piotrowicz) #57643
- [06fc3436f6] - (CVE-2026-21716) permission: include permission check on lib/fs/promises (RafaelGSS) nodejs-private/node-private#795
- [db48d9c675] - (CVE-2026-21715) permission: add permission check to realpath.native (RafaelGSS) nodejs-private/node-private#794
- [2a6105a63b] - (CVE-2026-21714) src: handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) nodejs-private/node-private#832
- [91b970886f] - (CVE-2026-21637) tls: wrap SNICallback invocation in try/catch (Matteo Collina) nodejs-private/node-private#819
