●Change8

Migrating to Node.js v23.6.1

Version v23.6.1 introduces 1 breaking change. This guide details how to update your code.

Released: 1/21/2025

1
Breaking Changes
2
Migration Steps
4
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

path.normalizeInternalWorkerhttp2fetch

Breaking Changes

●Issue #1

InternalWorker now throws an error when used while the permission model is enabled to prevent security bypasses (CVE-2025-23083).

Migration Steps

  1. 1
    Update Node.js to the latest security release.
  2. 2
    If using the experimental permission model, ensure that any reliance on InternalWorker is reviewed as it will now throw.

Release Summary

Security release addressing multiple CVEs including path traversal on Windows, HTTP/2 memory leaks, and permission model bypasses.

Need More Details?

View the full release notes and all changes for Node.js v23.6.1.

View Full Changelog