Files
packages/lang/node
Hirokazu MORIKAWA 4f80e67a71 node: bump to 20.20.2
This is a security release.
Notable Changes
* (CVE-2026-21717) fix array index hash collision (Joyee Cheung)
* (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan)
* (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina)
* (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS)pull/795>
* (CVE-2026-21715) add permission check to realpath.native (RafaelGSS)
* (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS)
* (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina)

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2026-04-05 15:23:22 +02:00
..
2026-04-05 15:23:22 +02:00
2026-04-05 15:23:22 +02:00