Node.js 14

Node.js 14 14.21.3

Run JavaScript Everywhere

Download for Windows

About Node.js 14

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

What's new in 14.21.3

This is a security release.
Notable Changes
The following CVEs are fixed in this release:
- CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule (High)
- CVE-2023-23920: Node.js insecure loading of ICU data through ICU_DATA environment variable (Low)
More detailed information on each of the vulnerabilities can be found in February 2023 Security Releases blog post.
This security release includes OpenSSL security updates as outlined in the recent
OpenSSL security advisory.
This security release also includes an npm update for Node.js 14 to address a number
of CVEs which either do not affect Node.js or are low severity in the context of Node.js. You
can get more details for the individual CVEs in
nodejs-dependency-vuln-assessments.
Commits
- [97a0443f13] - build: build ICU with ICU_NO_USER_DATA_OVERRIDE (RafaelGSS) nodejs-private/node-private#374
- [9e6221529b] - deps: cherry-pick Windows ARM64 fix for openssl (Richard Lau) #46566
- [0d5f86451d] - deps: update archs files for OpenSSL-1.1.1t (RafaelGSS) #46566
- [8c11d17b40] - deps: upgrade openssl sources to 1.1.1t (RafaelGSS) #46566
- [224e93c9ef] - deps: upgrade npm to 6.14.18 (Ruy Adorno) #45936
- [d73ea4de13] - doc: clarify release notes for Node.js 14.21.2 (Richard Lau) #45846
- [f7892c16be] - lib: makeRequireFunction patch when experimental policy (RafaelGSS) nodejs-private/node-private#358
- [fa115ee8ac] - module: protect against prototype mutation (Antoine du Hamel) #44007
- [83975b7fb4] - policy: makeRequireFunction on mainModule.require (RafaelGSS) nodejs-private/node-private#358
- [a5f8798d7a] - test: avoid left behind child processes (Richard Lau) #46276

Full release notes »

Technical details

PublisherNode.js Foundation
AuthorOpenJS Foundation
Version14.21.3
Release date2023-02-16
LicenseMIT
Installer typewix, zip
Architecturex86, x64
Package IDOpenJS.NodeJS.14
Admin rightsRequired
Install scopeAll users

Install Node.js 14 from the command line

Install with Windows Package Manager
winget install --id=OpenJS.NodeJS.14 -e
Update to the latest version
winget upgrade --id=OpenJS.NodeJS.14 -e
Uninstall
winget uninstall --id=OpenJS.NodeJS.14 -e
Silent install with the offline installer
msiexec /i "node-v14.21.3-x64.msi" /quiet /norestart
Uninstall the MSI package
msiexec /x {F7F792B4-BCA7-49F6-9E4D-84C76CA30A16} /quiet

Node.js 14 adds these commands to the command line: corepack, node, npm, npx.

codingcross-platformdevelopdevelopmentenvironmentjavascriptjsltsnodenpmprogrammingruntimev8

File types supported by Node.js 14

Node.js 14 can open or be associated with 3 file types:

.cjs.js.mjs

Node.js 14 version history

14.21.2 Dec 13, 2022

Notable Changes
OpenSSL 1.1.1s
This update is a bugfix release and does not address any security
vulnerabilities.
Root certificates updated to NSS 3.85
Certificates added:
- Autoridad de Certificacion Firmaprofesional CIF A62634068
- Certainly Root E1
- Certainly Root R1
- D-TRUST BR Root CA 1 2020
- D-TRUST EV Root CA 1 2020
- DigiCert TLS ECC P384 Root G5
- DigiCert TLS RSA4096 Root G5
- E-Tugra Global Root CA ECC v3
- E-Tugra Global Root CA RSA v3
- HiPKI Root CA - G1
- ISRG Root X2
- Security Communication ECC RootCA1
- Security Communication RootCA3
- Telia Root CA v2
- vTrus ECC Root CA
- vTrus Root CA
Certificates removed:
- Cybertrust Global Root
- DST Root CA X3
- GlobalSign Root CA - R2
- Hellenic Academic and Research Institutions RootCA 2011
Time zone update to 2022f
Time zone data has been updated to 2022f. This includes changes to Daylight
Savings Time (DST) for Fiji and Mexico. For more information, see
https://mm.icann.org/pipermail/tz-announce/2022-October/000075.html.
Commits
- [436a596e99] - crypto: update root certificates (Luigi Pinca) #45490
- [4b422d34af] - deps: V8: cherry-pick d2db7fa7f786 (Richard Lau) #45785
- [625f4bf3a9] - deps: update corepack to 0.15.1 (Node.js GitHub Bot) #45331
- [48a9810de8] - deps: update corepack to 0.15.0 (Node.js GitHub Bot) #45235
- [9f4e64b603] - deps: update timezone to 2022f (Richard Lau) #45521
- [f297b6bd21] - deps: update archs files for OpenSSL-1.1.1s (RafaelGSS) #45272 …

14.21.1 Nov 4, 2022

This is a security release.
Notable changes
The following CVEs are fixed in this release:
- CVE-2022-43548: DNS rebinding in --inspect via invalid octal IP address (Medium)
More detailed information on each of the vulnerabilities can be found in November 2022 Security Releases blog post.
Commits
- [2b433af094] - inspector: harden IP address validation again (Tobias Nießen) nodejs-private/node-private#354

14.21.0 Nov 1, 2022

Notable changes
- deps:
- update corepack to 0.14.2 (Node.js GitHub Bot) #44775
- src:
- add --openssl-shared-config option (Daniel Bevenius) #43124
Commits
- [773f587912] - deps: cherry-pick libuv/libuv@3a7b955 (Ben Noordhuis) #43950
- [a1dea66956] - deps: cherry-pick libuv/libuv@abb109f (Ben Noordhuis) #43950
- [98c49d81f5] - deps: update corepack to 0.14.2 (Node.js GitHub Bot) #44775
- [18c43c8518] - deps: update timezone to tz2022e (Richard Lau) #45094
- [a1f8e4db48] - deps: update corepack to 0.14.1 (Node.js GitHub Bot) #44704
- [e55389ca86] - deps: update corepack to 0.14.0 (Node.js GitHub Bot) #44509
- [0227462418] - deps: update corepack to 0.13.0 (Node.js GitHub Bot) #44318
- [ee24c320ea] - deps: update corepack to 0.12.3 (Node.js GitHub Bot) #44229
- [28e9891449] - deps: update corepack to 0.12.2 (Node.js GitHub Bot) #44159
- [b6972c9df2] - deps: update corepack to 0.12.1 (Node.js GitHub Bot) #43965
- [9d6cb3b5f1] - deps: update corepack to 0.12.0 (Node.js GitHub Bot) #43748
- [fa6c276b4f] - deps: update Corepack to 0.11.2 (Maël Nison) #43402
- [4f83d75626] - (SEMVER-MAJOR) src,doc,test: add --openssl-shared-config option (Daniel Bevenius) #43124
- [9487028043] - test: fix intl tests on small-icu builds (Antoine du Hamel) #41939
- [a1d52097f8] - tools: add more options to track flaky tests (Antoine du Hamel) #43954

Other versions

  • 14.20.1
  • 14.20.0
  • 14.19.3
  • 14.19.2
  • 14.19.1
  • 14.19.0

Frequently asked questions

Is Node.js 14 free?

Yes. Node.js 14 is free and open-source software released under the MIT license.

What is the latest version of Node.js 14?

The latest version is 14.21.3, released on Feb 16, 2023.

Is it safe to download Node.js 14?

The download button links to the official installer published on nodejs.org, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 4fbb9ff48fe733cef0b65f2c0948ba34b5d4b65ebfa1aa2dcd9c913c7b2bf95e.

Which Windows versions does Node.js 14 support?

Node.js 14 runs on Windows and is available for 32-bit (x86), 64-bit (x64) systems.

How do I install Node.js 14 silently?

Run the offline installer with msiexec /i "node-v14.21.3-x64.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=OpenJS.NodeJS.14 -e --silent.

How do I uninstall Node.js 14?

Open Settings › Apps › Installed apps, find Node.js 14 and select Uninstall. From the command line, run winget uninstall --id=OpenJS.NodeJS.14 -e.

What file types can Node.js 14 open?

Node.js 14 supports 3 file types, including .cjs, .js, .mjs.

Alternatives to Node.js 14

Other Programming Languages programs for Windows from different developers.

More from Node.js Foundation

All 18 programs »