---
date: '2020-06-02T18:41:58.892Z'
category: release
title: Node.js 12.18.0 (LTS)
layout: blog-post
author: Michaël Zasso
---

### Notable changes

This is a security release.

Vulnerabilities fixed:

- **CVE-2020-8172**: TLS session reuse can lead to host certificate verification bypass (High).
- **CVE-2020-11080**: HTTP/2 Large Settings Frame DoS (Low).
- **CVE-2020-8174**: `napi_get_value_string_*()` allows various kinds of memory corruption (High).

### Commits

- \[[`c6d0bdacc4`](https://github.com/nodejs/node/commit/c6d0bdacc4)] - **crypto**: update root certificates (AshCripps) [#33682](https://github.com/nodejs/node/pull/33682)
- \[[`916b2824d1`](https://github.com/nodejs/node/commit/916b2824d1)] - **(SEMVER-MINOR)** **deps**: update nghttp2 to 1.41.0 (James M Snell) [nodejs-private/node-private#206](https://github.com/nodejs-private/node-private/pull/206)
- \[[`d381426377`](https://github.com/nodejs/node/commit/d381426377)] - **(SEMVER-MINOR)** **http2**: implement support for max settings entries (James M Snell) [nodejs-private/node-private#206](https://github.com/nodejs-private/node-private/pull/206)
- \[[`7dd8982570`](https://github.com/nodejs/node/commit/7dd8982570)] - **napi**: fix memory corruption vulnerability (Tobias Nießen) [nodejs-private/node-private#195](https://github.com/nodejs-private/node-private/pull/195)
- \[[`0932309af2`](https://github.com/nodejs/node/commit/0932309af2)] - **tls**: emit `session` after verifying certificate (Fedor Indutny) [nodejs-private/node-private#200](https://github.com/nodejs-private/node-private/pull/200)
- \[[`c392d3923f`](https://github.com/nodejs/node/commit/c392d3923f)] - **tools**: update certdata.txt (AshCripps) [#33682](https://github.com/nodejs/node/pull/33682)

Windows 32-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0-x64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v12.18.0/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v12.18.0/win-x64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v12.18.0/node-v12.18.0.pkg \
macOS 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-aix-ppc64.tar.gz \
SmartOS 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-sunos-x64.tar.xz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v12.18.0/node-v12.18.0-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v12.18.0/node-v12.18.0.tar.gz \
Other release files: https://nodejs.org/dist/v12.18.0/ \
Documentation: https://nodejs.org/docs/v12.18.0/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

78581e043e6d33c2d793c24990424b1c3e8ac276e440d38184ba1af25b5a7aeb  node-v12.18.0-aix-ppc64.tar.gz
11fe50e670315d2d3c46317d23f7a019f46a3d08b534fbadee9a1bc3d4f81852  node-v12.18.0-darwin-x64.tar.gz
0ed99477999abb6dc2d399efff7b4e0e1c5ae6801c4890fb64470277a101098a  node-v12.18.0-darwin-x64.tar.xz
1c0bb8d7ec868ff163c56b8190f6f8072292f051e6046c2df7658079078e80f9  node-v12.18.0-headers.tar.gz
9540eccfaca1d17fc6addb1bba02fb3627b89f6e5b150f5f31d88cb8345ea111  node-v12.18.0-headers.tar.xz
11860778b886b9771980ba04774d18496fe6bd1f4a6181189f7b6be61b1e7c79  node-v12.18.0-linux-arm64.tar.gz
51b301102984ff73a74894396b774d00259bb3bb8c1de7c82674713acec7a214  node-v12.18.0-linux-arm64.tar.xz
79631712fdbd3f21f36c5760ded50cb47a7c983750d1eb8308e6eb0e46e6d180  node-v12.18.0-linux-armv7l.tar.gz
1ed5e19941632efcc97a85c359c46c1d550ff782c04e42abc6033c91d960cfaf  node-v12.18.0-linux-armv7l.tar.xz
308a6c346b4a239db2989a9f0c5b9a76247169094e51be7fc56b2622ede67db0  node-v12.18.0-linux-ppc64le.tar.gz
a60abf49ab93e0ca86683a826d40d130fd822793ab0bf37c6c3df55c66c71528  node-v12.18.0-linux-ppc64le.tar.xz
dad5949bdf2a2609f6120bd55e1fde24455740e4fcb815984c8d8e286e1c99dc  node-v12.18.0-linux-s390x.tar.gz
4b4beb7e9dd71e8dbef0fdab3db377c8ae5905c08885a5aea85302beb129cfc0  node-v12.18.0-linux-s390x.tar.xz
9526c0ee225037fc49a00e4bd5c5e2db26053f3f7c9ad124f5763d2eb80cff16  node-v12.18.0-linux-x64.tar.gz
2febc2506c298048bfddf896056be6191c1f08716876d960a4990bd63a7fe05a  node-v12.18.0-linux-x64.tar.xz
7137554f1e3ae55094ffb35f1bb9c35f90be076bed0089e463a8bd75da58738a  node-v12.18.0.pkg
f21cc693b1ad038a01ac8c5b97e1a8afe8be3b22cdaf95a54cd86b5938801dde  node-v12.18.0-sunos-x64.tar.gz
394d55866b9800681895d4d3b4efb4111873ccbc8d2c6847b2e87fadc683a643  node-v12.18.0-sunos-x64.tar.xz
a55c36f0cd9898f8bfa5a793a9e656e78d383f643ebec94afa67d084620b2b13  node-v12.18.0.tar.gz
d4688636a378367f5157f02bd5c13902f5c193356f8f7a35c99dfa383b03b13f  node-v12.18.0.tar.xz
ba0df9132406a6ce08200e208802662b7199d9094a2734fa886053c977ba77f1  node-v12.18.0-win-x64.7z
ca73a989eba5e863971cb600e5520cb4c5edf9c600fe8f76d9e4771ad03b5d08  node-v12.18.0-win-x64.zip
9b9495851c49fa0d53619dc96886c044018ad2378f27c08c978695f15dfc16e2  node-v12.18.0-win-x86.7z
00b2a2e3f49bd00f6e5beb8c4cfa3a8d1cde99c43d7c6eb9d39d248e35fb7f4f  node-v12.18.0-win-x86.zip
b79307b0f1b10d509995a8f6511d126006f24fc8cab5567101eade814dc27836  node-v12.18.0-x64.msi
5b31b5fbcd350a4d52370d806c40918dd0cf1085b08bd05934ace294c5d869ee  node-v12.18.0-x86.msi
6437becaeaad5a721106912dab3f866ecc50b32ac8a3ca32a3eb2bf1ec22770f  win-x64/node.exe
29a84d0c0dc7cc97cb3fe6aaad31cfba88ba33b662bd73187d442a7a5b86406b  win-x64/node.lib
322d12e99aa91f6a963737b8b2cf030e32c5bfa75f688c419e6daade23619cd5  win-x64/node_pdb.7z
23db76226598cfc1635be2b6a284452f078f8a0c79e7fdfa8337a8e281e82d00  win-x64/node_pdb.zip
17ef775d59a6897f1b071cd4517e88f3cf6013fcd6d79ca4fd40f72b6bc60df1  win-x86/node.exe
eefe19a12b21ddfece8e1c59ad7ba33b8255b66e7a23d93ddadb6a87f0f58275  win-x86/node.lib
7ee07015266d3a47b7c666e0c3cd7eddf01e7984a13fb45610a1628513ba1f00  win-x86/node_pdb.7z
cceefcc4231da029642a0c22c7d8818f19b14e7018d94f46453a440137e4e871  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=hOKF
-----END PGP SIGNATURE-----

```
