●Change8

Migrating to Node.js v20.18.2

Version v20.18.2 introduces 1 breaking change. This guide details how to update your code.

Released: 1/21/2025

1
Breaking Changes
2
Migration Steps
5
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

InternalWorkerpath.normalizehttp2undicifetch

Breaking Changes

●Issue #1

InternalWorker now throws an error when used while the Permission Model is enabled (CVE-2025-23083).

Migration Steps

  1. 1
    Update Node.js to the latest security release.
  2. 2
    If using the experimental Permission Model, ensure your application does not rely on InternalWorker as it will now throw an error.

Release Summary

This security release addresses several vulnerabilities including a high-severity issue in the Permission Model, path traversal on Windows, and memory leaks in HTTP/2.

Need More Details?

View the full release notes and all changes for Node.js v20.18.2.

View Full Changelog