---
date: '2024-04-03T14:27:39.936Z'
category: release
title: Node.js 18.20.1 (LTS)
layout: blog-post
author: Rafael Gonzaga
---

## 2024-04-03, Version 18.20.1 'Hydrogen' (LTS), @RafaelGSS

This is a security release.

### Notable Changes

- CVE-2024-27983 - Assertion failed in node::http2::Http2Session::\~Http2Session() leads to HTTP/2 server crash- (High)
- CVE-2024-27982 - HTTP Request Smuggling via Content Length Obfuscation - (Medium)
- llhttp version 9.2.1
- undici version 5.28.4

### Commits

- \[[`60d24938de`](https://github.com/nodejs/node/commit/60d24938de)] - **deps**: update undici to v5.28.4 (Matteo Collina) [nodejs-private/node-private#577](https://github.com/nodejs-private/node-private/pull/577)
- \[[`5d4d5848cf`](https://github.com/nodejs/node/commit/5d4d5848cf)] - **http**: do not allow OBS fold in headers by default (Paolo Insogna) [nodejs-private/node-private#558](https://github.com/nodejs-private/node-private/pull/558)
- \[[`0fb816dbcc`](https://github.com/nodejs/node/commit/0fb816dbcc)] - **src**: ensure to close stream when destroying session (Anna Henningsen) [nodejs-private/node-private#561](https://github.com/nodejs-private/node-private/pull/561)

Windows 32-bit Installer: https://nodejs.org/dist/v18.20.1/node-v18.20.1-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v18.20.1/node-v18.20.1-x64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v18.20.1/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v18.20.1/win-x64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v18.20.1/node-v18.20.1.pkg \
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-darwin-arm64.tar.gz \
macOS Intel 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-aix-ppc64.tar.gz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v18.20.1/node-v18.20.1-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v18.20.1/node-v18.20.1.tar.gz \
Other release files: https://nodejs.org/dist/v18.20.1/ \
Documentation: https://nodejs.org/docs/v18.20.1/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

a1dc083f3795ad304150759ee38d4b9c0ba541ac36629e6a0a2d8ea5f2c09e39  node-v18.20.1-aix-ppc64.tar.gz
275ffd6e96ea38e0ce0db2a37950381102fc95d1ad863b360ba0889dc7190405  node-v18.20.1-darwin-arm64.tar.gz
c55de6b8a916eab340b3ca104fbcc9fa345f37c36393c99b84dee0fa20b8924f  node-v18.20.1-darwin-arm64.tar.xz
87d6c6e5df6c4615ca90b044c75dc112473df4ebd55f6f471740c4e1c9602cbe  node-v18.20.1-darwin-x64.tar.gz
8d70c5ff18843b0d0a7117f77f5b5933e763c799172ce559427f7c84b9ee9b36  node-v18.20.1-darwin-x64.tar.xz
af15f373928f572f46014bc37631e7b7e882dd854049bef40c8c27eaabcf565b  node-v18.20.1-headers.tar.gz
53139e1027485211374378d8e5eedb19e64aa81e93ab3a7135be4527b1a16baf  node-v18.20.1-headers.tar.xz
52896372b3b151f639be7efa8662d68aaeb065cae2c15d61d14e2b73ada79597  node-v18.20.1-linux-arm64.tar.gz
613d0ea027fc5c16087d2b69f57d1e07dd1effcd3773910b6594672aee1fd4cd  node-v18.20.1-linux-arm64.tar.xz
b61392490e84cc6050967bbfc59cfd9ad6e737b6db9ef9d479b0d79c900aef64  node-v18.20.1-linux-armv7l.tar.gz
29bc1aae2200f59018bd7f3bd8c61afcf3b919177ff481d6404e5ae3a84ccc9b  node-v18.20.1-linux-armv7l.tar.xz
69e0c2d291c0838f01f157fc4713cc86c803396c6c25524397339946cf31a4cb  node-v18.20.1-linux-ppc64le.tar.gz
65a26b6dcb70c31ac47fbfc5688e62254962797289eed58365d40e2f54fb51d3  node-v18.20.1-linux-ppc64le.tar.xz
39793752b0ef9abe39ff942bbd3e442d71990f0592b3b0805252adb1b9c78e21  node-v18.20.1-linux-s390x.tar.gz
0eec4f8ab556ac78b68d74b5c24bbc79e9daa4ba53ca7faa20ab4ee6b87fcc7b  node-v18.20.1-linux-s390x.tar.xz
d226c39c5546dca97567db8f8ca7f92fca6572d44f181b1f85af83eee5d6f9e1  node-v18.20.1-linux-x64.tar.gz
1d08285abd9fad971af5c73d13e8f2a6ae9f2906ee036095dad7d5c286642a4e  node-v18.20.1-linux-x64.tar.xz
8a221a68978ab630a12e6ff5bf03a0f0fae521147210d2c36ba7450d387a237e  node-v18.20.1-win-x64.7z
5af456705d267507cd4be0572d787f85a42fa239e1a9dc5458d02a9ee76d223c  node-v18.20.1-win-x64.zip
7937811a1ddec32428dc4d05a0d62d5c81dcb61426a56bfe34e66681e3cc230d  node-v18.20.1-win-x86.7z
6dfc810fdb4511ab32c1da4faa934c6bae9c2bc305734efe58761398ac68f5f3  node-v18.20.1-win-x86.zip
6191ea9f02bd1087a90efce0f7118f0db33c66aee010463551602074f1cdcdad  node-v18.20.1-x64.msi
5587c3603752b1b406935118d8a923327a71da93d082d6e566c650be4d4e629c  node-v18.20.1-x86.msi
675c340469f6f71bbcc77f4c18bb480ecdab9c953059f571ef6f7794cd09d6e8  node-v18.20.1.pkg
7fb430d0b1256c22f26dd321070182ab943005bdb7b738facc6d9a82b1e04ed7  node-v18.20.1.tar.gz
c6d867a9f25e6354810effb8201f8147a15b28000e50790fda00d1ca15f49b8a  node-v18.20.1.tar.xz
8d36d351b7bc1e21a3f196cc12f3c1dc3ebd54bc8b8b678f254c6589faa8799f  win-x64/node.exe
64d93225aaece04e3cd45177d6dea2b22df49e127281fefa3ade43ac46a36cc6  win-x64/node.lib
99765d9956720edfe1cd7429fd04e2bdf0cf2bc8fb419d58a69dd8fd4a0de608  win-x64/node_pdb.7z
a84fffe06ab69f15b9b32bed9aac330e45e2b10129ce38d0bbd00f917511af15  win-x64/node_pdb.zip
c286ee6d2188037e33a643f112553a1c20bb7ba74428a180d7cdeec2975f8fc6  win-x86/node.exe
df34047e8ae646e6f43d76ecbec9709a185f29e01f49b377c4c46070cacc2859  win-x86/node.lib
76612ed31fcff457141de2eafcf3d4e4ca7f6e080c4068f0f9b9ac25248c23b7  win-x86/node_pdb.7z
c02dcf9dba6277c9f1edb9dbf325c076af9e1846ca2c465638021f8e4314bbcf  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=zFXW
-----END PGP SIGNATURE-----
```
