Node.js 20.20.2 (LTS)
Marco Ippolito
2026-03-24, Version 20.20.2 'Iron' (LTS), @marco-ippolito
This is a security release.
Notable Changes
- (CVE-2026-21717) fix array index hash collision (Joyee Cheung) https://github.com/nodejs-private/node-private/pull/834
- (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC and KMAC (Filip Skokan) https://github.com/nodejs-private/node-privat