---
date: '2026-01-13T14:18:09.314Z'
category: release
title: Node.js 22.22.0 (LTS)
layout: blog-post
author: Marco Ippolito
---

## 2026-01-13, Version 22.22.0 'Jod' (LTS), @marco-ippolito

This is a security release.

### Notable Changes

- (CVE-2025-59465) add TLSSocket default error handler
- (CVE-2025-55132) disable futimes when permission model is enabled
- (CVE-2025-55130) require full read and write to symlink APIs
- (CVE-2025-59466) rethrow stack overflow exceptions in async_hooks
- (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle
- (CVE-2026-21637) route callback exceptions through error handlers

### Commits

- \[[`6badf4e6f4`](https://github.com/nodejs/node/commit/6badf4e6f4)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#60997](https://github.com/nodejs/node/pull/60997)
- \[[`37509c3ff0`](https://github.com/nodejs/node/commit/37509c3ff0)] - **deps**: update undici to 6.23.0 (Matteo Collina) [nodejs-private/node-private#791](https://github.com/nodejs-private/node-private/pull/791)
- \[[`eb8e41f8db`](https://github.com/nodejs/node/commit/eb8e41f8db)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://github.com/nodejs-private/node-private/pull/797)
- \[[`ebbf942a83`](https://github.com/nodejs/node/commit/ebbf942a83)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://github.com/nodejs-private/node-private/pull/748)
- \[[`6b4849583a`](https://github.com/nodejs/node/commit/6b4849583a)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://github.com/nodejs-private/node-private/pull/760)
- \[[`ddadc31f09`](https://github.com/nodejs/node/commit/ddadc31f09)] - **(CVE-2025-59466)** **src**: rethrow stack overflow exceptions in async_hooks (Matteo Collina) [nodejs-private/node-private#773](https://github.com/nodejs-private/node-private/pull/773)
- \[[`d4d9f3915f`](https://github.com/nodejs/node/commit/d4d9f3915f)] - **(CVE-2025-55131)** **src,lib**: refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://github.com/nodejs-private/node-private/pull/759)
- \[[`25d6799df6`](https://github.com/nodejs/node/commit/25d6799df6)] - **(CVE-2026-21637)** **tls**: route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://github.com/nodejs-private/node-private/pull/796)

Windows 32-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-x86.msi \
Windows 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-x64.msi \
Windows ARM 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0-arm64.msi \
Windows 32-bit Binary: https://nodejs.org/dist/v22.22.0/win-x86/node.exe \
Windows 64-bit Binary: https://nodejs.org/dist/v22.22.0/win-x64/node.exe \
Windows ARM 64-bit Binary: https://nodejs.org/dist/v22.22.0/win-arm64/node.exe \
macOS 64-bit Installer: https://nodejs.org/dist/v22.22.0/node-v22.22.0.pkg \
macOS Apple Silicon 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-darwin-arm64.tar.gz \
macOS Intel 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-darwin-x64.tar.gz \
Linux 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-x64.tar.xz \
Linux PPC LE 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-ppc64le.tar.xz \
Linux s390x 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-s390x.tar.xz \
AIX 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-aix-ppc64.tar.gz \
ARMv7 32-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-armv7l.tar.xz \
ARMv8 64-bit Binary: https://nodejs.org/dist/v22.22.0/node-v22.22.0-linux-arm64.tar.xz \
Source Code: https://nodejs.org/dist/v22.22.0/node-v22.22.0.tar.gz \
Other release files: https://nodejs.org/dist/v22.22.0/ \
Documentation: https://nodejs.org/docs/v22.22.0/api/

### SHASUMS

```
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

b5ab6deeb8d54b9738039a8ffdc4781cc4b81b291e79b20d3600f830d1d669cb  node-v22.22.0-aix-ppc64.tar.gz
26b66be5f735426dce7355d629246f704be08b377f3382de293a6513676cf051  node-v22.22.0-arm64.msi
5ed4db0fcf1eaf84d91ad12462631d73bf4576c1377e192d222e48026a902640  node-v22.22.0-darwin-arm64.tar.gz
2bd596bbfc4a275ceb8721a5954ee97daea5ebe673e96a185ebd732f6fb023ac  node-v22.22.0-darwin-arm64.tar.xz
5ea50c9d6dea3dfa3abb66b2656f7a4e1c8cef23432b558d45fb538c7b5dedce  node-v22.22.0-darwin-x64.tar.gz
48bc437e00e0c1483da34c21dca196efcb8d22e5dcb0bc7c65386afb00fabb85  node-v22.22.0-darwin-x64.tar.xz
670494f0cc674059596222c60e5db84fbe80c849d7ffb1c3fbd20e4f55b8ea85  node-v22.22.0-headers.tar.gz
58e1483493244a4f8aa7d21ad8b21fc4f72cc3ca669fdf292089cad9de221fde  node-v22.22.0-headers.tar.xz
25ba95dfb96871fa2ef977f11f95ea90818c8fa15c0f2110771db08d4ba423be  node-v22.22.0-linux-arm64.tar.gz
1bf1eb9ee63ffc4e5d324c0b9b62cf4a289f44332dfef9607cea1a0d9596ba6f  node-v22.22.0-linux-arm64.tar.xz
a92684d8720589f19776fb186c5a3a4d273c13436fc8c44b61dd3eeef81f0d3a  node-v22.22.0-linux-armv7l.tar.gz
a8b4f15f6e1f371422f1f7abcca4c46bd7abc1c732c274bc5cb108b841c1f0ff  node-v22.22.0-linux-armv7l.tar.xz
54680eec598330b9863ab37ada46456415b776e46345958476fcd2212abdf0f3  node-v22.22.0-linux-ppc64le.tar.gz
d83b9957431cc18e1fc143a4b99f89cde7b8a18f53ef392231b4336afd058865  node-v22.22.0-linux-ppc64le.tar.xz
9b24cc6dd17106725d79645adf0a3b62fa3310e4d30aa11147dd3fe2d8325ef4  node-v22.22.0-linux-s390x.tar.gz
5aa0e520689448c4233e8d73f284e8e0634fdcd32b479735698494be5641f3e4  node-v22.22.0-linux-s390x.tar.xz
c33c39ed9c80deddde77c960d00119918b9e352426fd604ba41638d6526a4744  node-v22.22.0-linux-x64.tar.gz
9aa8e9d2298ab68c600bd6fb86a6c13bce11a4eca1ba9b39d79fa021755d7c37  node-v22.22.0-linux-x64.tar.xz
0e437be47d67d916c2b94073321dfdaffef85ef6e527d509588d00994e9036af  node-v22.22.0.pkg
5a4585d7f26bfb283267194b299243efea5ee6edd2fbf887825469b4ac94aece  node-v22.22.0.tar.gz
4c138012bb5352f49822a8f3e6d1db71e00639d0c36d5b6756f91e4c6f30b683  node-v22.22.0.tar.xz
31bad2fed05553bd4709851e5269ec953c744ee5845d2962564f37fcff634a53  node-v22.22.0-win-arm64.7z
5b44fd410df7b4cd0a1891a05a7b606f8fb7d8786a94997b996a372e82478d7a  node-v22.22.0-win-arm64.zip
98758c6ec0b29a03b4e1ec0ace7671a8ac57839034d23a1a62e91fc782fb97d2  node-v22.22.0-win-x64.7z
c97fa376d2becdc8863fcd3ca2dd9a83a9f3468ee7ccf7a6d076ec66a645c77a  node-v22.22.0-win-x64.zip
3cf831dc2ae1a53da6baee772388b7cd5635617c8a133fbaf92269fde3336686  node-v22.22.0-win-x86.7z
5d7f6cfc50474cf784027ce9ddabf47a0198ea4b588301ab8675de8c56217247  node-v22.22.0-win-x86.zip
b10f88c6ded24ca487839b3eccb8870a08d7f9fc2b9bb3b463fc72a3a40bcdb1  node-v22.22.0-x64.msi
ec3eeb357dbb980aea936afb8ce8b279f12cf0bec03fd7781ddcfad44f01cba6  node-v22.22.0-x86.msi
fd44256121597d6a3707f4c7730b4e3733eacb5a95cc78a099f601d7e7f8290d  win-arm64/node.exe
48839df5eda1889bf704353d35699a4b0d379ee3b2c87d9bfdf0d2d22b182c18  win-arm64/node.lib
8497008940246b148cf9e4455568adbc1a4d5b71f52ebd236dc4f90e5f30142d  win-arm64/node_pdb.7z
ded8b2b2c37f93017d8d565f4b32db5278283d3d9527803008ee1aa282c3a084  win-arm64/node_pdb.zip
bae898add4643fcf890a83ad8ae56e20dce7e781cab161a53991ceba70c99ffb  win-x64/node.exe
29b1f8c74cb600ff522dcb9da5807c752fae6f510868b7f3079851ebf27154ea  win-x64/node.lib
549027ada17424c185a545cf09b3fad7a1d769777ec587481cefe694447728c6  win-x64/node_pdb.7z
1b3fad691fc6f0c1bf679e5999de3d4e16a506e54e404e7e5f9459c9e1e9e1cb  win-x64/node_pdb.zip
65fff00e7d40f9a7fc7fb7a64e0d3a595adb6807eeafc8ed8477850eedc90e68  win-x86/node.exe
03c89ca02b018a620471a8411881ab90f472b9e88e5b150cf58b075afb7ce2e9  win-x86/node.lib
fc2cd7abd2c3ee99de42b16bb86e1ecf4fed6d87b714d4827f1e26c4a7e17e51  win-x86/node_pdb.7z
28561a9939829dc3d32ac6b6bc478a1614fbe3992657ab45d1926a0007c2e8fd  win-x86/node_pdb.zip
-----BEGIN PGP SIGNATURE-----
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=vkw+
-----END PGP SIGNATURE-----
```
