Node.js has published six security updates with fixes for critical vulnerabilities. These updates affect versions prior to 22.23.5, 24.22.3, 26.13.1, and 27.0.0. If you use Node.js on your server, it's important to update to one of these corrected versions or higher.
What happened
Node.js is a JavaScript runtime environment that allows executing code on servers. On November 11, 2026, the Node.js security team published six security fixes (identified with CVEs) addressing serious issues. These vulnerabilities include uncontrolled exception execution, sensitive information leaks, and errors in HTTP/2 and TLS connection handling. All of them have a high severity level (CVSS HIGH), meaning they could be exploited by a remote attacker if not corrected.
Does it affect you?
These updates affect Node.js versions prior to 22.23.5, 24.22.3, 26.13.1, and 27.0.0. If you have Node.js installed on your server (for example, on a Cloud or dedicated server), you should check the current version. To do this, run the following command in the terminal:
```bash
node -v
```
If the version you get is older than the ones mentioned, you should update to one of the corrected versions or higher. Keep in mind that unsupported versions do not receive these patches and are not recommended for continued use.
What you need to do
- Update Node.js to one of the corrected versions or higher in your branch (22.23.5, 24.22.3, 26.13.1, or 27.0.0). You can do this using managers like
nvmor by downloading directly from the official site. - Restart applications that depend on Node.js so the changes take effect.
- Check that everything works correctly after the update. If you encounter errors, review the logs or contact support if needed.
Need help?
If you need help with the update or have questions about how to proceed, you can open a support ticket from your client panel in SWPanel. Our support team is available to assist you with this process.
