Node.js 8

Node.js 8 8.11.3

Run JavaScript Everywhere

Download for Windows

About Node.js 8

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.

What's new in 8.11.3

Notable Changes
- buffer (CVE-2018-7167): Fixes Denial of Service vulnerability where calling Buffer.fill() could hang
- http2
- (CVE-2018-7161): Fixes Denial of Service vulnerability by updating the http2 implementation to not crash under certain circumstances during cleanup
- (CVE-2018-1000168): Fixes Denial of Service vulnerability by upgrading nghttp2 to 1.32.0
Commits
- [e1ff7c3cbc] - deps: update to nghttp2 1.32.0 (James M Snell) nodejs-private/node-private#125
- [c5a2748d8f] - doc: buffer.fill() can zero-fill on invalid input (Сковорода Никита Андреевич) nodejs-private/node-private#119
- [354f2d97ff] - http2: fixup http2stream cleanup and other nits (James M Snell) nodejs-private/node-private#123
- [25c5111ca4] - src: avoid hanging on Buffer#fill 0-length input (Сковорода Никита Андреевич) nodejs-private/node-private#119
- [10c5adf19b] - test: add Realloc() shrink after reading stream data test (Anna Henningsen) nodejs-private/node-private#132
- [bc91220ca2] - test: add tls write error regression test (Shigeki Ohtsu) nodejs-private/node-private#131
- [acd11b01c4] - test: add regression test for nghttp2 CVE-2018-1000168 (James M Snell) nodejs-private/node-private#125

Full release notes »

Technical details

PublisherNode.js Foundation
AuthorOpenJS Foundation
Version8.11.3
Release date2018-06-12
LicenseMIT
Installer typewix, zip
Architecturex86, x64
Package IDOpenJS.NodeJS.8
Admin rightsRequired
Install scopeAll users

Install Node.js 8 from the command line

Install with Windows Package Manager
winget install --id=OpenJS.NodeJS.8 -e
Update to the latest version
winget upgrade --id=OpenJS.NodeJS.8 -e
Uninstall
winget uninstall --id=OpenJS.NodeJS.8 -e
Silent install with the offline installer
msiexec /i "node-v8.11.3-x64.msi" /quiet /norestart
Uninstall the MSI package
msiexec /x {D453BC74-B405-4241-9095-808419A77FB3} /quiet

Node.js 8 adds these commands to the command line: corepack, node, npm, npx.

codingcross-platformdevelopdevelopmentenvironmentjavascriptjsltsnodenpmprogrammingruntimev8

File types supported by Node.js 8

Node.js 8 can open or be associated with 3 file types:

.cjs.js.mjs

Node.js 8 version history

8.11.2 May 15, 2018
8.11.0 Mar 28, 2018

This is a security release. All Node.js users should consult the security release summary at https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/ for details on patched vulnerabilities.
Fixes for the following CVEs are included in this release:
- CVE-2018-7158
- CVE-2018-7159
- CVE-2018-7160
Notable Changes
- Upgrade to OpenSSL 1.0.2o: Does not contain any security fixes that are known to impact Node.js.
- Fix for inspector DNS rebinding vulnerability (CVE-2018-7160): A malicious website could use a DNS rebinding attack to trick a web browser to bypass same-origin-policy checks and allow HTTP connections to localhost or to hosts on the local network, potentially to an open inspector port as a debugger, therefore gaining full code execution access. The inspector now only allows connections that have a browser Host value of localhost or localhost6.
- Fix for 'path' module regular expression denial of service (CVE-2018-7158): A regular expression used for parsing POSIX paths could be used to cause a denial of service if an attacker were able to have a specially crafted path string passed through one of the impacted 'path' module functions.
- Reject spaces in HTTP Content-Length header values (CVE-2018-7159): The Node.js HTTP parser allowed for spaces inside Content-Length header values. Such values now lead to rejected connections in the same way as non-numeric values. …

Frequently asked questions

Is Node.js 8 free?

Yes. Node.js 8 is free and open-source software released under the MIT license.

What is the latest version of Node.js 8?

The latest version is 8.11.3, released on Jun 12, 2018.

Is it safe to download Node.js 8?

The download button links to the official installer published on nodejs.org, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with d7e3057e921803159266ff1340283420a3e5053bad0c3ff951d8946a8f9aa66b.

Which Windows versions does Node.js 8 support?

Node.js 8 runs on Windows and is available for 32-bit (x86), 64-bit (x64) systems.

How do I install Node.js 8 silently?

Run the offline installer with msiexec /i "node-v8.11.3-x64.msi" /quiet /norestart, or install it with Windows Package Manager: winget install --id=OpenJS.NodeJS.8 -e --silent.

How do I uninstall Node.js 8?

Open Settings › Apps › Installed apps, find Node.js 8 and select Uninstall. From the command line, run winget uninstall --id=OpenJS.NodeJS.8 -e.

What file types can Node.js 8 open?

Node.js 8 supports 3 file types, including .cjs, .js, .mjs.

Alternatives to Node.js 8

Other Programming Languages programs for Windows from different developers.

More from Node.js Foundation

All 18 programs »