The Node.js JavaScript Runtime. 🐢🚀 Need help with Node.js? We've got a repo for that: https://xitter.twitterapi.xyz/t.co/BaCSQqhNRO
✨🌍🌎🌏✨
Joined November 2009
- Tweets7.3K
- Following597
- Followers92K
- Likes3.6K
🔐 Node.js security updates are now available!
Including the following dependency updates to address public vulnerabilities:
- llhttp on 22.x, 24.x, 26.x
- undici on 24.x, 26.x
- sqlite on 22.x, 24.x
Available for 26.x, 24.x, 22.x Node.js release lines nodejs.org/en/blog/vulnerabi…
Last week, the new Node.js 27 Alpha release upgrades V8 to version 15.6, from the 14.6 used by Node.js 26. Let's take a closer look at what this means for developers and what the new version of V8 brings.
- New JS features and language changes
- Performance improvements
- Memory usage and GC changes
- Diagnostic and tooling changes
- Behavior differences
..and more!
nodejs.org/en/blog/announcem…
Node.js retweeted
nvm v0.41.0 is out!
New: --only=alpha,lts,non-lts,iojs to pick versions by category (alphas hidden by default), --lts aliases, annotated ls-remote.
Plus 59 bug fixes and 7 security fixes, 25 of which were found and fixed with help from @AnthropicAI's OSS Scanner.
github.com/nvm-sh/nvm/releas…
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
Node.js 27 Alpha is out! 🚀 Check it out:
Node.js 27 Alpha is out! 💚
First release of the new model: Alpha until April, Current on 2027-04 and LTS on 2027-10.
What's new:
* V8 15.6 🚀
* OpenSSL 4.1, npm 12.1
* --allow-env permission 🔍
* Native fs.glob, net/promises ⚡
* domain deprecated
nodejs.org/en/blog/release/v…
Node.js 24.22.2 “Krypton” (LTS) is here! 🚀
Includes V8 backports and a fix that keeps async context in parked stream writes.
🔗 Full changelog and download links: nodejs.org/en/blog/release/v…
Node.js retweeted
AI is finding open source bugs faster than people can fix them.
Node.js fixed a record 50 vulnerabilities this year. The bots find them, but maintainers triage, patch, and coordinate disclosure.
If your company runs on open source, fund the people keeping it secure.
nytimes.com/2026/10/28/techn…
Node.js retweeted
First @nodejs 26 'Lithium' Long Term Support release, v26.13.0, is now out. nodejs.org/en/blog/release/v…
Node.js 26 “Lithium” is now Long Term Support 🎉
v26.13.0 is out, with updates through April 2029.
Heads-up for Linux users coming from an earlier LTS: libatomic may need to be installed separately.
nodejs.org/en/blog/release/v…
Node.js retweeted
Do all security vulnerabilities need to be fixed in private?
With support from @SovereignTechFund, OpenJS is using @nodejs to test whether some vulnerabilities can be remediated faster in the open without increasing security risk.
Read more: openjsf.org/blog/sovereign-t…
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
Node.js retweeted
🔄 Node.js is changing how it approaches major releases.
Node.js 26 will be the final release under the project’s twice-yearly model. Starting with Node.js 27, new major versions will follow an annual release schedule, giving developers a more predictable lifecycle to plan around.
But a clearer release schedule does not automatically move production applications forward. If your application is still tied to Node.js 12, 14, 16, 18, or 20, upgrading may require dependency updates, compatibility testing, and changes to application behavior.
TuxCare’s Endless Lifecycle Support provides ongoing CVE patches for these Node.js versions, so you can keep your application protected while working toward a supported release.
Learn more:
tuxcare.com/lp/click-nodejs-…
Node.js retweeted
Finding vulnerabilities is only part of open source security. Maintainers still need resources to triage, patch, and ship secure releases.
The new OpenJS Security Stewardship Program will fund researchers and maintainers, starting with Node.js.
hubs.la/Q04ykc4R0
Node.js 24.20.0 and Node.js 26.8.1 are out now. 💚
- nodejs.org/en/blog/release/v…
- nodejs.org/en/blog/release/v…
Are you a Node.js user? We want your feedback.
Tell us all about how you're using Node.js in our annual user survey. Your response helps shape our future priorities!
linuxfoundation.surveymonkey…
Node.js Interactive 2026 brought together the developers and maintainers shaping the future of Node.js. ⚡️
The event covered practical work happening across the project, including built in TypeScript support, node:test, QUIC and HTTP/3, documentation tooling, integration testing, and AI assisted development.
The conversations also highlighted an important part of building Node.js: strong testing, security, documentation, and maintainer support remain essential as the ecosystem evolves.
Read the full Node.js Interactive 2026 recap 👇
bit.ly/4gix0zB
Huge thanks to @aviv_keller for the recap.
Node.js retweeted
Missed Node.js Interactive @RenderATL?
We've got you covered will a full recap at nodejs.org/en/blog/events/no….
Node.js retweeted
We're excited for this one. The @nodejs Interactive Code and Learn workshop is happening at RenderATL this Thursday, August 13, led by our friends at Harper.
Attending @RenderATL? Join the nodejs-interactive-code-and-learn channel in Render's Discord ahead of time: discord.com/invite/cnCVB3Tgd…
There's still time to register: renderatl.com/node
Node.js retweeted
The @nodejs platform track is stacked at @nodeconfeu. @_rafaelgss on why Node 27 changes the release model, @jasnell on a common minimum Node.js subset for all runtimes, FFI crossing the native boundary, and @qard asking what if everything was JavaScript. Bologna, Sep 29-30.
