2026-05-13, Version 22.22.3 'Jod' (LTS), @marco-ippolito
2026-05-14T08:51:59Z•70b4e2ad034a78bd9b222f1a8dfc1f88ed784f3b5b11cc439a98e2f0f7a74302
LTScryptodependenciesexperimental-ffihttp2nodejsreleasesecuritytlsundiciv8webcrypto
What happened
Multiple Node.js releases were published in May 2026 including 26.0.0/26.1.0 (Current) and LTS updates 24.15.0 and 22.22.3. Notable changes include the introduction of an experimental node:ffi module (unsafe by design), V8/Undici/Temporal updates, various dependency bumps, and a crypto fix for a potential NULL pointer dereference. Several security fixes were released (in 25.8.2 and 24.14.1/24.15.0 family), addressing TLS/SNI invocation handling, header/trailer prototype pollution, permission checks, URL parsing crashes, timing-safe comparisons in WebCrypto HMAC/KMAC, HTTP/2 flow-control error,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- nodejs_node_releases
- Record identifier
- 70b4e2ad034a78bd9b222f1a8dfc1f88ed784f3b5b11cc439a98e2f0f7a74302
- Enrichment time
- 2026-05-14T08:51:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.