Skip to content

feat(blog): create post for v22.23.2 #9043

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
bmuenzenmeyer merged 1 commit into from
Jul 29, 2026
+126 −0
Merged

feat(blog): create post for v22.23.2 #9043

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
126 changes: 126 additions & 0 deletions apps/site/pages/en/blog/release/v22.23.2.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,126 @@
---
date: '2026-07-29T14:01:35.511Z'
category: release
title: Node.js 22.23.2 (LTS)
layout: blog-post
author: Marco Ippolito
---

## 2026-07-29, Version 22.23.2 'Jod' (LTS), @marco-ippolito

This is a security release.

### Notable Changes

- (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
- (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
- (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
- (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
- (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
- (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
- (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
- (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
- (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
- (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
- deps: update llhttp to 9.4.3 (Paolo Insogna)
- deps: update undici to 6.28.0 (Node.js GitHub Bot)

### Commits

- \[[`4b12ac38a1`](https://github.com/nodejs/node/commit/4b12ac38a1)] - **deps**: update llhttp to 9.4.3 (Paolo Insogna) [nodejs-private/node-private#935](https://github.com/nodejs-private/node-private/pull/935)
- \[[`3fd0aa51d0`](https://github.com/nodejs/node/commit/3fd0aa51d0)] - **deps**: update undici to 6.28.0 (Node.js GitHub Bot) [#64714](https://github.com/nodejs/node/pull/64714)
- \[[`22efc051a3`](https://github.com/nodejs/node/commit/22efc051a3)] - **(CVE-2026-58042)** **dns**: handle large resolveAny address replies (RafaelGSS) [nodejs-private/node-private#929](https://github.com/nodejs-private/node-private/pull/929)
- \[[`c8525ac3a6`](https://github.com/nodejs/node/commit/c8525ac3a6)] - **(CVE-2026-58044)** **http**: reject requests exceeding max header count (Matteo Collina) [nodejs-private/node-private#932](https://github.com/nodejs-private/node-private/pull/932)
- \[[`daa6d25e3d`](https://github.com/nodejs/node/commit/daa6d25e3d)] - **(CVE-2026-56848)** **http2**: defer rst stream while in scope (Matteo Collina) [nodejs-private/node-private#921](https://github.com/nodejs-private/node-private/pull/921)
- \[[`f14d78b9e0`](https://github.com/nodejs/node/commit/f14d78b9e0)] - **(CVE-2026-56846)** **http2**: retain header memory in session accounting (Matteo Collina) [#63752](https://github.com/nodejs/node/pull/63752)
- \[[`51123159fe`](https://github.com/nodejs/node/commit/51123159fe)] - **(CVE-2026-58040)** **https**: bind identity checks to session reuse (Matteo Collina) [nodejs-private/node-private#934](https://github.com/nodejs-private/node-private/pull/934)
- \[[`acaf4266b2`](https://github.com/nodejs/node/commit/acaf4266b2)] - **(CVE-2026-56850)** **https**: distinguish PFX object-array agent keys (RafaelGSS) [nodejs-private/node-private#930](https://github.com/nodejs-private/node-private/pull/930)
- \[[`440329f624`](https://github.com/nodejs/node/commit/440329f624)] - **(CVE-2026-58043)** **permission**: avoid granting radix split nodes (RafaelGSS) [nodejs-private/node-private#911](https://github.com/nodejs-private/node-private/pull/911)
- \[[`ed18b9cc07`](https://github.com/nodejs/node/commit/ed18b9cc07)] - **(CVE-2026-58039)** **permission**: check final report output path (RafaelGSS) [nodejs-private/node-private#926](https://github.com/nodejs-private/node-private/pull/926)
- \[[`0566c3cccd`](https://github.com/nodejs/node/commit/0566c3cccd)] - **(CVE-2026-56847)** **permission**: enforce fs write permission for trace events (RafaelGSS) [nodejs-private/node-private#927](https://github.com/nodejs-private/node-private/pull/927)
- \[[`0d072480c3`](https://github.com/nodejs/node/commit/0d072480c3)] - **(CVE-2026-58045)** **zlib**: throw on out-of-bounds write buffers (RafaelGSS) [nodejs-private/node-private#931](https://github.com/nodejs-private/node-private/pull/931)

Windows 32-bit Installer: https://nodejs.org/dist/v22.23.2/node-v22.23.2-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v22.23.2/node-v22.23.2-x64.msi \
Windows ARM 64-bit Installer: https://nodejs.org/dist/v22.23.2/node-v22.23.2-arm64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v22.23.2/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v22.23.2/win-x64/node.exe \
Windows ARM 64-bit Binary: https://nodejs.org/dist/v22.23.2/win-arm64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v22.23.2/node-v22.23.2.pkg \
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-darwin-arm64.tar.gz \
macOS Intel 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-aix-ppc64.tar.gz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v22.23.2/node-v22.23.2.tar.gz \
Other release files: https://nodejs.org/dist/v22.23.2/ \
Documentation: https://nodejs.org/docs/v22.23.2/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

77c63032fd4ab8e98e0ae7db9d79e396659e04af95a5edf8e1ca869e426c04a5 node-v22.23.2-aix-ppc64.tar.gz
963c0f779d8f893f17f6b2a0060932c366ffa59f7c79527748a9c558c152dd38 node-v22.23.2-arm64.msi
61130f394c1630d211dd50aecc4353d379480f36d3ac913cd85dbba1aed585c6 node-v22.23.2-darwin-arm64.tar.gz
5eff7a9011895aae3f29d06f167b84a62b028a591370c7cafb59103559fd26e1 node-v22.23.2-darwin-arm64.tar.xz
58e99022c2ff89395576cc7fd4d98cea24bb68081475d5f88b801ee8729fb026 node-v22.23.2-darwin-x64.tar.gz
96dff79f4e19a78715da559ec7cac2028f4985a175ea0c3454625a269c21deb7 node-v22.23.2-darwin-x64.tar.xz
daaf13ec5d45a38bbcfcff06d0723f72a6813b89ab27bb5af2ac8e1f6259dde0 node-v22.23.2-headers.tar.gz
b141dcc466e2bc15bbc57602898915cf7b73bff974e72a357b1e2e3a4cfbd2e5 node-v22.23.2-headers.tar.xz
013b59cfd2819703a6f4a14ab891fc46fc2a4e3f5bcd92de3fb4929b43e35b30 node-v22.23.2-linux-arm64.tar.gz
fff4078c5def658577f92c88db7db3bc0072924bfb93fe52c1e744a54e94abb8 node-v22.23.2-linux-arm64.tar.xz
2a2f59eb8fd9dec27b3bee17c729131d1fd3e6d9943d479f1156ce38af8cd599 node-v22.23.2-linux-armv7l.tar.gz
ef8f26a3de19acd8c23548e6c3cfc2052610b0e67abb5fd64dbd92c8b1c1245b node-v22.23.2-linux-armv7l.tar.xz
65c8aa9e647196f30d3564bb6b201306b1b520f72f0dd3278da326014a018379 node-v22.23.2-linux-ppc64le.tar.gz
e2ba10110ad34096c051fe47134fcd12175ecc48e7e879d7d4c78b70cf66442c node-v22.23.2-linux-ppc64le.tar.xz
986b8441b1d1a01c70ed710bab201741fd0d196d302a7e4338fefd5e1c10e61e node-v22.23.2-linux-s390x.tar.gz
50aa0935c7caee2f95434f84c2c19f16e4f223257eadb341a3a2d5aaa545bbe6 node-v22.23.2-linux-s390x.tar.xz
b294a556e639d64338823920e5866c21c02741742d2e1529ee1a225c1ec9252a node-v22.23.2-linux-x64.tar.gz
d60acfe00a2932254bb0ad20e01b0d74397a0875595de719654b214f4b03f307 node-v22.23.2-linux-x64.tar.xz
0422d63395d28cad31d92a202b8a5ff76d3bf09f234786926622bde7fe2d7a89 node-v22.23.2.pkg
cdaed46fcd8923a55974b7bbc7caaadeaaf7aed60cc137e59837b72f575ef641 node-v22.23.2.tar.gz
bbe768df8d5815d7fa76124052985332452e0a4742d39f32027550d1aab8f6fb node-v22.23.2.tar.xz
f8bdc72090f0e13223c6b974cb0a2919be9650f27f45223df4bb78231df3fb7c node-v22.23.2-win-arm64.7z
fec025a6da31757e3b6af84c5a1628e9d38442ca99a2161091d78f2fcfa35ef3 node-v22.23.2-win-arm64.zip
4f72483c39634934c77b1ece25911d84d2a929d6171751ea701d13f348368838 node-v22.23.2-win-x64.7z
1177b4137ba5adaa56354ae40f1080c7450e8ae09cecb47da459d1c52ac99f97 node-v22.23.2-win-x64.zip
211b8539e37b4f0a31d11016bdb882f036b1f3bcd2da879f365e0d712d7973a1 node-v22.23.2-win-x86.7z
725c9e2bdd1c2016b41c995a81f4fa36ce4e2ee565b7455d8f889182727df647 node-v22.23.2-win-x86.zip
ce9572ae220c345fbae2340bbb4d084e8ca5e0fe093ee7067d43094ae23be989 node-v22.23.2-x64.msi
bacc6689c6b6953e120fedaf0bba9f16349bb2755f6ee9fecf33317daab9d029 node-v22.23.2-x86.msi
97cce5301a815d2dce07ac5bfd1e6039eae88185ec1d10ae4f8cb712f1732878 win-arm64/node.exe
e56e62f4a7ae6643a40db01f09072e8a93ccbe73be8abff927b793344691d6b7 win-arm64/node.lib
42263b4322f459ad5c665a1569e77a53125853f43069ded98432bbdb29378fab win-arm64/node_pdb.7z
9b1d825eebb86b58829d72ce3b0c28a84d80bf7e2204c835e1ec99a8729559df win-arm64/node_pdb.zip
0d0f5e39f9f3d9587bc19f73eab3c2c9c4903fd02d6dbf9c853dd81b3d95fad4 win-x64/node.exe
ac15f1e9d7c8279353723a77f6319967f1a41c06026521094a8234c2e6fbe052 win-x64/node.lib
bf6be5c7dae68227e6fd6a105aa5b2eb8b3511a6f1ab4488f27ce36b85d66f30 win-x64/node_pdb.7z
f5836a84ab8aa5ecf5e5e415cf8fa92c2b8fc11c3128e9225877c2628dd00318 win-x64/node_pdb.zip
ae3f4245f4b87a79b1a9f66fbede12f526adc3dea9c4bdb50d66ed8c88eb395a win-x86/node.exe
66949ba371a159f5e3626f6ce960f85ab6bcdd237eafcdfbc11d1377a2767652 win-x86/node.lib
754c6fa0c493d19baa93cccf25668637b48b46edb810f604034c87cf7a1c3ed7 win-x86/node_pdb.7z
65d6b0a8590eb1401bb6756d63b0ab12db3c31bc0ce71a892e3079c8fdeca305 win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=TLBg
-----END PGP SIGNATURE-----
```
Loading