---
date: '2024-07-08T18:15:09.898Z'
category: release
title: Node.js 18.20.4 (LTS)
layout: blog-post
author: Rafael Gonzaga
---

## 2024-07-08, Version 18.20.4 'Hydrogen' (LTS), @RafaelGSS

This is a security release.

### Notable Changes

- CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
- CVE-2024-22020 - Bypass network import restriction via data URL (Medium)

### Commits

- \[[`85abedf1ff`](https://github.com/nodejs/node/commit/85abedf1ff)] - **lib,esm**: handle bypass network-import via data: (RafaelGSS) [nodejs-private/node-private#522](https://github.com/nodejs-private/node-private/pull/522)
- \[[`eccd63b865`](https://github.com/nodejs/node/commit/eccd63b865)] - **src**: handle permissive extension on cmd check (RafaelGSS) [nodejs-private/node-private#596](https://github.com/nodejs-private/node-private/pull/596)

Windows 32-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4-x64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v18.20.4/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v18.20.4/win-x64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v18.20.4/node-v18.20.4.pkg \
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-darwin-arm64.tar.gz \
macOS Intel 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-aix-ppc64.tar.gz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v18.20.4/node-v18.20.4-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v18.20.4/node-v18.20.4.tar.gz \
Other release files: https://nodejs.org/dist/v18.20.4/ \
Documentation: https://nodejs.org/docs/v18.20.4/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

8b964752863994f9f74b9aa176584e3a1a9f408a1c57c41d929bc9d2a54020b4  node-v18.20.4-aix-ppc64.tar.gz
aca5b568cc2a7e918037f05168634a921d88f43882c92a01b4ef5e39d0b89414  node-v18.20.4-darwin-arm64.tar.gz
e4ff1ac52a42e8f5eadc59e5bde778e31f246636beae0615a8b82885d8d30f4a  node-v18.20.4-darwin-arm64.tar.xz
7d2eb630b66bb39b9cf6bb12b35de833e2445797f2ddc9bcae714e63e75181ca  node-v18.20.4-darwin-x64.tar.gz
a868e8a1c27fe5fe329d80dd3b51409cefdf9a7869d9abca42473beae7535e10  node-v18.20.4-darwin-x64.tar.xz
be69a16ef1b0483ca0aacc1c8d0af69e87582356e236fe750e9eef9a6127db1b  node-v18.20.4-headers.tar.gz
7d5fa4cf18910fd84d94e800459851c6067aca3646507e408ebcd7e572865eca  node-v18.20.4-headers.tar.xz
f4e0b8b1a89e5d6529e517d57b42ac5cbab0562d86e88566d8e90578257e2b16  node-v18.20.4-linux-arm64.tar.gz
1cb5053bd4109aec41a8104ea3e9f48b95b1adef4d23bb4fc64f8c2d90c65ae3  node-v18.20.4-linux-arm64.tar.xz
ce311e7167c8cc0392753119dad55291842c2f4aa7a87a093144fc9338f35b61  node-v18.20.4-linux-armv7l.tar.gz
65686d63e0a73915a57ff487a0f720a502779f97e9cc93b3cc8b74563f8baa85  node-v18.20.4-linux-armv7l.tar.xz
2356de20cb33798690c90270b557e690c34cfd67525e32a0a6301a8176ce0bd8  node-v18.20.4-linux-ppc64le.tar.gz
d3baf8cca1862f42529258e37a715e4e59de7c6d00409e5f8dce31ced8196ed0  node-v18.20.4-linux-ppc64le.tar.xz
654ee94e5695f4c97dc1adc03cf833763ba62865fefb057af7258a20a87be51c  node-v18.20.4-linux-s390x.tar.gz
050d3646dc19a2e72f6bb16159af49d25594e9a55fa35f264c34dac7c4665ab6  node-v18.20.4-linux-s390x.tar.xz
c4b0827dc47609d0a8379e6de6c74b3934da0b1312c733b5ebdcac16e3f1e954  node-v18.20.4-linux-x64.tar.gz
592eb35c352c7c0c8c4b2ecf9c19d615e78de68c20b660eb74bd85f8c8395063  node-v18.20.4-linux-x64.tar.xz
235645185550bf8dade9d747d5bd7aa7c901b12433ac743857738df7e94ecde0  node-v18.20.4-win-x64.7z
a2864d9048fb83cc85e3b2c3d18f5731b69cae8964bb029f5cdecbb0820eccd7  node-v18.20.4-win-x64.zip
eab07bf4b4f443448205699d7a4b6d2cfa2e847c2f0d041a8117fcdcedf9e350  node-v18.20.4-win-x86.7z
4939b50f5252ae05b271e20cbdaca36c26c7b78ea817a74fd6098a2435641b91  node-v18.20.4-win-x86.zip
c2654d3557abd59de08474c6dd009b1d358f420b8e4010e4debbf130b1dfb90a  node-v18.20.4-x64.msi
dcf8f4a7022be6e3a1f1af875cca6747904f88feda55387daf009308d2844003  node-v18.20.4-x86.msi
0df3e744a2beba9fe91d43a218a82dc23bcf4f6dd0532b35816766e4dd801e49  node-v18.20.4.pkg
349259af6821f730bc4ca3a0e6576efc75ba86e546d118629a5b75eb8ebc3a0b  node-v18.20.4.tar.gz
a76c7ea1b96aeb6963a158806260c8094b6244d64a696529d020547b9a95ca2a  node-v18.20.4.tar.xz
4dd7333812a5df39cae6c7e69e519328ff61d0e997bdc62c307e3303c73270be  win-x64/node.exe
64d93225aaece04e3cd45177d6dea2b22df49e127281fefa3ade43ac46a36cc6  win-x64/node.lib
902520361c065585d8ece561d7e5078ef3f873699c2a0285d536b96fd3dc7816  win-x64/node_pdb.7z
d5c75042e9cfb6852e07ae8460cd14d3ec243926201c8f4cc44e0e3e68538663  win-x64/node_pdb.zip
bb4c0584d5f32a5246dcf02c613f9c11dcd596ab09e5be43144f0ee2fc271a15  win-x86/node.exe
df34047e8ae646e6f43d76ecbec9709a185f29e01f49b377c4c46070cacc2859  win-x86/node.lib
ce1995e9e9f99b05abc4808437eca817dd4bb28500ae9164ea2df7acbac069c6  win-x86/node_pdb.7z
02f8dd1808dce9777374fd1e4874eaddfbb748b55b5c70e70e32bf1388594ed3  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=Gnr/
-----END PGP SIGNATURE-----
```
