crypto

This release introduces several minor version bumps with new features like SIV/GCM-SIV modes in crypto, improved histogram implementations, and REPL syntax highlighting. It also includes important bug fixes and performance enhancements across various modules.

This release introduces new features like package maps for loaders, `node:stream/iter`, and `--permission-audit`, alongside numerous bug fixes and improvements across various modules including buffer, crypto, and test runner.

This release introduces new features like perfetto support and Symbol.dispose in ModuleHooks, alongside numerous bug fixes and dependency updates. It also includes a minor version bump for crypto and module functionalities.

This release introduces new features to the ffi and test_runner modules, alongside numerous bug fixes and dependency updates. Notably, the crypto module has undergone significant backend restructuring.

This release introduces several minor features like blob.textStream() and an experimental ESM flag, alongside dependency updates and various bug fixes across modules like buffer and crypto. A new release key from Stewart X Addison is also introduced.

This release introduces significant features like package maps in the loader, VFS subsystem support, and enhancements to crypto and networking APIs. It also includes various performance optimizations and bug fixes across core modules.

This release introduces several minor version features, including new Web Cryptography algorithms (TurboSHAKE, KangarooTwelve) and an increased default Buffer pool size. It also includes security updates via root certificate renewal and various hardening improvements across the crypto module.

This is a security release addressing multiple high and medium severity vulnerabilities across TLS, crypto, HTTP/2, DNS, and permission handling modules. Key fixes involve input validation and boundary checks to prevent potential exploits.

This is a security release addressing multiple high and medium severity CVEs across TLS, crypto, HTTP/2, and DNS modules. It also includes dependency upgrades for nghttp2, llhttp, openssl, and undici.

This is a security release addressing multiple high and medium severity CVEs across TLS, crypto, HTTP/2, and DNS modules. It also includes dependency updates and removes deprecated http2 priority signaling.

This release introduces minor version bumps including an increased default Buffer pool size and new HTTP validation options, alongside important documentation updates and dependency upgrades.

This release introduces several minor features, including randomUUIDv7(), enhanced debugger capabilities, and signal support for fs.stat(). It also includes numerous dependency updates across the codebase.

This release focuses heavily on updating numerous internal dependencies, including V8, OpenSSL, npm, and others, alongside minor documentation improvements and a critical fix in the crypto module.

Node.js 26 introduces the Temporal API by default and updates V8 to 14.6 and Undici to 8.0. This release also includes several major breaking changes, removing legacy stream modules and deprecated HTTP methods.

This is a security release addressing multiple CVEs related to hash collisions, timing attacks, file system permissions, and error handling. Dependencies like V8 and undici were also updated.

This release includes fixes for module resolution in ES Modules, improvements to crypto and stream handling, and updates to several internal dependencies. A notable documentation change clarifies the application of DEP0169 regarding `url.resolve()`.

This release introduces new features like C++ support for diagnostics channels and the --permission-audit flag, alongside numerous dependency updates and bug fixes across modules like crypto and buffer.

This release introduces HTTP/1 fallback configuration for http2, supports ESM entry points in SEA, and marks the sqlite module as a release candidate. It also includes several documentation improvements and dependency updates.

This release focuses on security updates including root certificate renewals and OpenSSL 3.0.17, alongside the deprecation of HTTP/2 priority signaling and various dependency bumps.

This release updates Node.js 22.x to OpenSSL 3.5.2 for long-term support and introduces several minor features including Brotli support in streams, SEA configuration improvements, and stabilization of path.matchesGlob.

A security-focused release addressing CVE-2025-23166 to fix error handling in asynchronous crypto operations.

This security release addresses CVE-2025-23166 by fixing error handling in asynchronous crypto operations and updates the c-ares dependency to v1.34.5.

This is a security release addressing two vulnerabilities: CVE-2025-23166 regarding async crypto error handling and CVE-2025-23165 regarding filesystem request cleanup.

This security release addresses multiple vulnerabilities (CVE-2025-23166, CVE-2025-23167, CVE-2025-23165, CVE-2024-27982) by updating the llhttp parser and fixing critical issues in the crypto and fs modules.

This release focuses on security and dependency updates, notably upgrading OpenSSL to 3.0.16 and root certificates to NSS 3.108, alongside internal improvements to the inspector API.

This release introduces an experimental JSON configuration file for Node.js flags and adds new utility methods to the TLS and V8 modules. It also includes several dependency updates, including OpenSSL 3.0.16 and NSS 3.108 root certificates.

This release enables require(esm) and module syntax detection by default on Node.js v20.x. It also introduces the postMessageToThread worker API and updates several core dependencies including ICU, NSS, and Corepack.

This release updates root certificates to NSS 3.107, adds support for Python 3.13, and includes several dependency updates and documentation accessibility improvements.

This release stabilizes ESM import attributes and JSON modules, updates root certificates to NSS 3.104, and enables the --heap-prof flag in NODE_OPTIONS. It also includes several build fixes and dependency updates for c-ares, zlib, and simdutf.

Release 2.2.6 focuses on npm dependency resolution improvements, Node.js compatibility fixes for HTTP and file systems, and a new unstable feature for lazy loading dynamic imports.

This release introduces performance optimizations for cryptographic hashing using ring and adds HTTP information support to the Node.js compatibility layer.