Node.js 24.13.0 (LTS)

Marco Ippolito

2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito

This is a security release.

Notable Changes

(CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) https://github.com/nodejs-private/node-private/pull/797
(CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) https://github.com/nodejs-private/node-private/pull/748
(CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) https://github.com/nodejs-private/node-private/pull/760
(CVE-2025-59466) rethrow stack overflow exceptions in async_hooks (Matteo Collina) https://github.com/nodejs-private/node-private/pull/773
(CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) https://github.com/nodejs-private/node-private/pull/759
(CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) https://github.com/nodejs-private/node-private/pull/796

Commits

[2092785d01] - deps: update c-ares to v1.34.6 (Node.js GitHub Bot) #60997
[3e58b7f2af] - deps: update undici to 7.18.2 (Node.js GitHub Bot) #61283
[4ba536a5a6] - (CVE-2025-59465) lib: add TLSSocket default error handler (RafaelGSS) nodejs-private/node-private#797
[89adaa21fd] - (CVE-2025-55132) lib: disable futimes when permission model is enabled (RafaelGSS) nodejs-private/node-private#748
[7302b4dae1] - (CVE-2025-55130) lib,permission: require full read and write to symlink APIs (RafaelGSS) nodejs-private/node-private#760
[ac030753c4] - (CVE-2025-59466) src: rethrow stack overflow exceptions in async_hooks (Matteo Collina) nodejs-private/node-private#773
[20075692fe] - (CVE-2025-55131) src,lib: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) nodejs-private/node-private#759
[20591b0618] - (CVE-2026-21637) tls: route callback exceptions through error handlers (Matteo Collina) nodejs-private/node-private#796

SHASUMS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

ac21e9af08a4d54b057d800c03bc95322946952b8daa811cada98bfb66a8ce8f  node-v24.13.0-aix-ppc64.tar.gz
9ef67a1cc2b64de38bdd6139d7967699915312df37e9b176277631165e39798d  node-v24.13.0-arm64.msi
d595961e563fcae057d4a0fb992f175a54d97fcc4a14dc2d474d92ddeea3b9f8  node-v24.13.0-darwin-arm64.tar.gz
c59a517e9147f25c6167426875a571432f1478c1d7ee7ecc10baa46b0d0e8545  node-v24.13.0-darwin-arm64.tar.xz
6f03c1b48ddbe1b129a6f8038be08e0899f05f17185b4d3e4350180ab669a7f3  node-v24.13.0-darwin-x64.tar.gz
4ca0a48233f091a2a69ec28dd58e59f394a1b2d4f052b6c6b10f760377fe266f  node-v24.13.0-darwin-x64.tar.xz
f5589e2b4b962af05381a31d11c3c9b004daf8bd63c95c0e1a406600daa8ae88  node-v24.13.0-headers.tar.gz
9344eddda6621e46d77b26f1b93db25a52592f9eb199f300440fe3c30802f186  node-v24.13.0-headers.tar.xz
0f6d40b94c6a2eb6b4c240ffc8b9fd3ada7ab044c177dd413c06e1ef9a63f081  node-v24.13.0-linux-arm64.tar.gz
aa881151bd0f9f154a0424dd60a72e9ce10672619121658c278a24327ef46831  node-v24.13.0-linux-arm64.tar.xz
18011930b182a1c5b49d2326191fdba58270bdf7b45b8c7df855ef31931b148a  node-v24.13.0-linux-ppc64le.tar.gz
babe8c72871c751ed288fc1a1aeb2a95d830f732e43d9e4ab0cf137e3273eb8e  node-v24.13.0-linux-ppc64le.tar.xz
5744610b624f2e82ae1ca279d8ece7b8ca466437239533d2d033565303bc1d39  node-v24.13.0-linux-s390x.tar.gz
75f6f780442b7b98a357fd9cf6e383c3d22a8efe9ed4ee1d54ea68ff16889904  node-v24.13.0-linux-s390x.tar.xz
6223aad1a81f9d1e7b682c59d12e2de233f7b4c37475cd40d1c89c42b737ffa8  node-v24.13.0-linux-x64.tar.gz
e798599612f4bb71333a3397ab0d095fd62214e115aea45aa858a145fc72d67e  node-v24.13.0-linux-x64.tar.xz
b62d61eb92a1fdcc3fc4951fc087f206eb6f46d088bd9a6630892f4eb5203d13  node-v24.13.0.pkg
54cb58921b4ce2831c6690ee823a3d39cfbf2b75f4e556c4c2bde90f3d8fd1ca  node-v24.13.0.tar.gz
320fe909cbb347dcf516201e4964ef177b8138df9a7f810d0d54950481b3158b  node-v24.13.0.tar.xz
724fcf1a20ea345cc38fb970044a6f1617a1dc47e477ee5a92fe8b243b95700a  node-v24.13.0-win-arm64.7z
92b9f9b0c0c123e11e4afc535f0ec19cd987465eea506427553a49971364158a  node-v24.13.0-win-arm64.zip
04d3619e21c07a84043accbacc73256431c6adbea65d4c026c6eb22ff6fd453a  node-v24.13.0-win-x64.7z
ca2742695be8de44027d71b3f53a4bdb36009b95575fe1ae6f7f0b5ce091cb88  node-v24.13.0-win-x64.zip
1a5f0cd914386f3be2fbaf03ad9fff808a588ce50d2e155f338fad5530575f18  node-v24.13.0-x64.msi
91e25b2ef61ee30a9e6afce0f336b4d55d688c3717244e496fa11d69fc3a1717  win-arm64/node.exe
afef88b389be8ac30974d2cf69de26001f95f1e9efe1811f2e8467c4cdfe05d0  win-arm64/node.lib
4e3e5e11d6c60e66f65e1292bf524afeb6293f3d96ffdfbbe6756287be307e78  win-arm64/node_pdb.7z
087c7cf72188ce884288ddcd818f799f76e20ee1a1536d624e3f5baea1313c05  win-arm64/node_pdb.zip
d14ba95cdce1ef7dc9ad3ac74949ca5db38b27378ee30f30a23cf26f9e875a11  win-x64/node.exe
be205f2934c17fbd56ce6cdfcfbeb2f6a85061d5141e7a58eba240a8477a12fd  win-x64/node.lib
1120267174deb5e7661e5b9b0a291e55c1937155e1dedd85018cb83eb48f466c  win-x64/node_pdb.7z
e96ce3ea96ff4067f7cbeece8fe11a06f925676e956859a86e7421d325080eb1  win-x64/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=vpzY
-----END PGP SIGNATURE-----

Node.js 25.3.0 (Current)Node.js 20.20.0 (LTS)