Node.js 22

Node.js 22 22.23.4

Run JavaScript Everywhere

Download for Windows

About Node.js 22

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

What's new in 22.23.4

This is a security release.
Notable Changes
- (CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell)
- (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell)
- (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina)
- (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS)
- (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan)
- (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel)
- (CVE-2026-111497) deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov)
- crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel)
- deps: update c-ares to 1.34.9 (Node.js GitHub Bot)
- deps: update timezone to 2026e (Node.js GitHub Bot)
- deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot)
- deps: update sqlite to 3.53.4 (Node.js GitHub Bot)
- deps: update undici to 6.29.1 (Node.js GitHub Bot)
Commits
- [68fa0df6d6] - crypto: update root certificates to NSS 3.131.1 (Antoine du Hamel) #66877
- [dd6b47573b] - crypto: reset random caches across snapshots (Filip Skokan) nodejs-private/node-private#987
- [a62b7d5362] - crypto: harden X.509 conversion and formatting (Filip Skokan) nodejs-private/node-private#966
- [ec9e5e4a3e] - crypto: update root certificates to NSS 3.129 (Node.js GitHub Bot) #66496
- [a538a9515d] - deps: update c-ares to 1.34.9 (Node.js GitHub Bot) #66868
- [67d294739f] - deps: brotli: cherry-pick 0ed4268a4401abcb44720963 (Evgenii Kliuchnikov) nodejs-private/node-private#1002
- [1ab9db8a74] - deps: update timezone to 2026e (Node.js GitHub Bot) #66419
- [52b4bcab03] - deps: update timezone to 2026d (Node.js GitHub Bot) #66333
- [60f4833d41] - deps: update archs files for openssl-3.5.9 (Node.js GitHub Bot) #66396
- [05470dc308] - deps: upgrade openssl sources to openssl-3.5.9 (Node.js GitHub Bot) #66396
- [47333fe4f4] - deps: update sqlite to 3.53.4 (Node.js GitHub Bot) #64745
- [98258b855f] - deps: update sqlite to 3.53.3 (Node.js GitHub Bot) #64180
- [a8349b6408] - deps: update sqlite to 3.53.2 (Node.js GitHub Bot) #63774
- [e9e295bcc1] - deps: cherry-pick e807d4e379 from SQLite (Junsu Han) #63525
- [512a9b61f0] - deps: update sqlite to 3.53.1 (Node.js GitHub Bot) #63217
- [e708247254] - deps: update sqlite to 3.53.0 (Node.js GitHub Bot) #62699
- [857be5afa3] - deps: update undici to 6.29.1 (Node.js GitHub Bot) #66765 …

Full release notes »

Technical details

PublisherNode.js Foundation
AuthorOpenJS Foundation
Version22.23.4
Release date2026-10-20
LicenseMIT
Installer typewix
Architecturex86, x64, arm64
Package IDOpenJS.NodeJS.22
Admin rightsRequired
Install scopeAll users

Install Node.js 22 from the command line

Install with Windows Package Manager
winget install --id=OpenJS.NodeJS.22 -e
Update to the latest version
winget upgrade --id=OpenJS.NodeJS.22 -e
Uninstall
winget uninstall --id=OpenJS.NodeJS.22 -e
Silent install with the offline installer
msiexec /i "node-v22.23.4-x64.msi" /quiet /norestart
Uninstall the MSI package
msiexec /x {DB301453-81CD-4694-8A78-746617513B00} /quiet

Node.js 22 adds these commands to the command line: corepack, node, npm, npx.

codingcross-platformdevelopdevelopmentenvironmentjavascriptjsltsnodenpmprogrammingruntimev8

File types supported by Node.js 22

Node.js 22 can open or be associated with 3 file types:

.cjs.js.mjs

Node.js 22 version history

22.23.3 Sep 23, 2026

Notable Changes
- [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
- [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
- [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
- [e306521444] - deps: update icu to 78.3 (Node.js GitHub Bot) #62324
- [a9cb31129f] - deps: update OpenSSL 3.5.8 (Node.js GitHub Bot) #65542
- [2a3548e51c] - deps: update Undici to 6.28.1 (mcollina) #65790
- [3909ff2c4a] - node-api: support SharedArrayBuffer in napi_create_typedarray (Yilong Li) #62710
- [66de6349ad] - node-api: add napi_create_external_sharedarraybuffer (Ben Noordhuis) #62623
Commits
- [44cf27b8fa] - build: update binary-upload to use correct tarball name (Stewart X Addison) #65282
- [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746
- [71feba6b69] - crypto: update root certificates to NSS 3.123.1 (Node.js GitHub Bot) #63527
- [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653
- [2a3548e51c] - deps: update undici to 6.28.1 (mcollina) #65790
- [59d853a4df] - deps: update archs files for openssl-3.5.8 (Node.js GitHub Bot) #65542
- [a9cb31129f] - deps: upgrade openssl sources to openssl-3.5.8 (Node.js GitHub Bot) #65542
- [3376e27de2] - deps: V8: cherry-pick a6eaf7574109 (Camillo Bruni) #65402
- [b816fc8958] - deps: upgrade npm to 10.9.9 (npm team) #64884
- [4e4bd1b104] - deps: update timezone to 2026c (Node.js GitHub Bot) #64588 …

22.23.2 Jul 28, 2026

This is a security release.
Notable Changes
- (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High
- (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High
- (CVE-2026-58043) permission: avoid granting radix split nodes (RafaelGSS) – High
- (CVE-2026-56850) https: distinguish PFX object-array agent keys (RafaelGSS) – Medium
- (CVE-2026-58040) https: bind identity checks to session reuse (Matteo Collina) – Medium
- (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) – Medium
- (CVE-2026-58045) zlib: throw on out-of-bounds write buffers (RafaelGSS) – Medium
- (CVE-2026-56847) permission: enforce fs write permission for trace events (RafaelGSS) – Low
- (CVE-2026-58039) permission: check final report output path (RafaelGSS) – Low
- (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) – Low
- deps: update llhttp to 9.4.3 (Paolo Insogna)
- deps: update undici to 6.28.0 (Node.js GitHub Bot)
Commits
- [4b12ac38a1] - deps: update llhttp to 9.4.3 (Paolo Insogna) nodejs-private/node-private#935
- [3fd0aa51d0] - deps: update undici to 6.28.0 (Node.js GitHub Bot) #64714
- [22efc051a3] - (CVE-2026-58042) dns: handle large resolveAny address replies (RafaelGSS) nodejs-private/node-private#929
- [c8525ac3a6] - (CVE-2026-58044) http: reject requests exceeding max header count (Matteo Collina) nodejs-private/node-private#932 …

22.23.1 Jun 22, 2026

This release includes a fix for an unexpected behavior introduced
by the recent security release (22.23.0).
Commits
- [41d2ee13be] - build: switch coverage-windows to windows-2022 (Richard Lau) #63940
- [eaa292549e] - http: avoid stream listeners on idle agent sockets (Matteo Collina) #64004

Other versions

  • 22.23.0
  • 22.22.3
  • 22.22.2
  • 22.22.1
  • 22.22.0
  • 22.21.1

Frequently asked questions

Is Node.js 22 free?

Yes. Node.js 22 is free and open-source software released under the MIT license.

What is the latest version of Node.js 22?

The latest version is 22.23.4, released on Oct 20, 2026.

Is it safe to download Node.js 22?

The download button links to the official installer published on nodejs.org, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with ca9303d3a12e8bec6de829fcb7812fc776930e0ce5c030328a24984ef928427e.

Which Windows versions does Node.js 22 support?

Node.js 22 runs on Windows and is available for 32-bit (x86), 64-bit (x64), ARM64 systems.

How do I install Node.js 22 silently?

Run the offline installer with msiexec /i "node-v22.23.4-x64.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=OpenJS.NodeJS.22 -e --silent.

How do I uninstall Node.js 22?

Open Settings › Apps › Installed apps, find Node.js 22 and select Uninstall. From the command line, run winget uninstall --id=OpenJS.NodeJS.22 -e.

What file types can Node.js 22 open?

Node.js 22 supports 3 file types, including .cjs, .js, .mjs.

Alternatives to Node.js 22

Other Programming Languages programs for Windows from different developers.

More from Node.js Foundation

All 18 programs »