Skip to content

Commit 8bc62ad

Browse files
authored
Blog: pre-release announcement March 26 sec release (#8727)
1 parent 783305e commit 8bc62ad

File tree

2 files changed

+43
-4
lines changed

2 files changed

+43
-4
lines changed
Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
---
2+
date: 2026-03-17T03:00:00.000Z
3+
category: vulnerability
4+
title: Tuesday, March 24, 2026 Security Releases
5+
slug: march-2026-security-releases
6+
layout: blog-post
7+
author: The Node.js Project
8+
---
9+
10+
# Summary
11+
12+
The Node.js project will release new versions of the 25.x, 24.x, 22.x, 20.x
13+
releases lines on or shortly after, Tuesday, March 24, 2026 in order to address:
14+
15+
- 2 high severity issues.
16+
- 5 medium severity issues.
17+
- 2 low severity issues.
18+
19+
## Impact
20+
21+
The 25.x release line of Node.js is vulnerable to 2 high severity issues, 5 medium severity issues, 2 low severity issues.
22+
The 24.x release line of Node.js is vulnerable to 2 high severity issues, 4 medium severity issues, 2 low severity issues.
23+
The 22.x release line of Node.js is vulnerable to 2 high severity issues, 4 medium severity issues, 2 low severity issues.
24+
The 20.x release line of Node.js is vulnerable to 2 high severity issues, 4 medium severity issues, 2 low severity issues.
25+
26+
It's important to note that End-of-Life versions are always affected when a security release occurs.
27+
To ensure your system's security, please use an up-to-date version as outlined in our
28+
[Release Schedule](https://github.com/nodejs/release#release-schedule).
29+
30+
## Release timing
31+
32+
Releases will be available on, or shortly after, Tuesday, March 24, 2026.
33+
34+
## Contact and future updates
35+
36+
The current Node.js security policy can be found at <https://nodejs.org/en/security/>.
37+
Please follow the process outlined in <https://github.com/nodejs/node/blob/master/SECURITY.md> if you wish to report a vulnerability in Node.js.
38+
39+
Subscribe to the low-volume announcement-only nodejs-sec mailing list at <https://groups.google.com/forum/#!forum/nodejs-sec> to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization.

apps/site/site.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,10 +28,10 @@
2828
],
2929
"websiteBanners": {
3030
"index": {
31-
"startDate": "2026-01-13T00:00:00.000Z",
32-
"endDate": "2026-01-20T00:00:00.000Z",
33-
"text": "January Security Release is available",
34-
"link": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",
31+
"startDate": "2026-03-17T03:00:00.000Z",
32+
"endDate": "2026-03-24T03:00:00.000Z",
33+
"text": "New security releases to be made available Tuesday, March 24, 2026",
34+
"link": "https://nodejs.org/en/blog/vulnerability/march-2026-security-releases",
3535
"type": "warning"
3636
}
3737
},

0 commit comments

Comments
 (0)