Node.js 22.23.3 LTS was released on September 23, 2026, featuring a critical fix for a memory-safety bug in the HTTP/2 stack that could lead to server crashes or remote code execution. This release also adds two new Node-API functions to enhance the capabilities of native add-on authors, particularly for working with SharedArrayBuffer. The patch includes updates to several dependencies, including npm, OpenSSL, and ICU, ensuring that cryptographic correctness and TLS handling are up to date. Additionally, smaller corrections were made, such as improvements to URL handling and enhanced security for Windows task runners

Node.js 22.23.3 LTS Released with HTTP 2 Use-After-Free Fix

Node.js 22.23.3 hit the shelves on September 23, 2026, as the latest patch in the 'Jod' LTS line. Its headline fix closes a heap use-after-free in the HTTP/2 stack that could crash servers or enable remote code execution. The release also adds two Node-API functions hat help native addon authors.

Node.js 22.23.3 LTS Released with HTTP 2 Use-After-Free Fix @ Linux Compatible