●Change8

Migrating to Node.js v22.13.1

Version v22.13.1 introduces 1 breaking change. This guide details how to update your code.

Released: 1/21/2025

1
Breaking Changes
2
Migration Steps
5
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

path.normalizeInternalWorkerhttp2fetchundici

Breaking Changes

●Issue #1

InternalWorker now throws an error when used while the permission model is enabled to prevent security bypasses (CVE-2025-23083).

Migration Steps

  1. 1
    Update Node.js to the latest version to apply security patches.
  2. 2
    If using the experimental permission model, ensure that any reliance on InternalWorker is reviewed as it will now throw an error.

Release Summary

This security release addresses critical vulnerabilities including a path traversal on Windows, an HTTP/2 memory leak, and unauthorized InternalWorker access when the permission model is active.

Need More Details?

View the full release notes and all changes for Node.js v22.13.1.

View Full Changelog