The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.
Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.
Over the past year, ProPublica has photographed some of the more than 500 U.S. citizens who have been held against their will by immigration agents and learned of the lingering impact the experience ...