FIND-20260331-004 · 2026-03-31 · Innovation Veille

Node.js v24.14.1 security release — new LTS candidate patched

release MEDIUM
Node.js v24.14.1 published 2026-03-24 as part of the March security release batch. v24 is the upcoming LTS line. This release also ships undici 7.24.4. Similarly v20.20.2 was released patching the same HIGH CVEs. All four active Node.js lines (20, 22, 24, 25) were updated simultaneously.

Source

https://github.com/nodejs/node/releases/tag/v24.14.1

ODS Impact

ODS dashboard and any Node.js tooling should target v22.22.2 (current LTS) or v20.20.2 (maintenance LTS). v24 will become LTS in October 2026 — relevant for planning future upgrades. The undici update (HTTP client) is also important for internal service-to-service calls.

Security Review

License: MIT | Maintenance: ACTIVE | Risk: LOW | Recommendation: SAFE_TO_USE

Tags

nodejs release security lts v24