node
Version: 25.8.2Node.js JavaScript runtime ✨🐢🚀✨
What is "node"?
Node.js JavaScript runtime ✨🐢🚀✨
How to use this package
Quick install
Installs the package into the current environment for this session. Use --build or --runtime to persist it as a build-time or runtime dependency.
min add nodeDeclare as a task dependency in minimal.toml
Listing the package under tasks.<name>.packages makes it available inside that task’s sandbox.
[tasks.dev]
packages = ["node"]Build-time vs runtime
Choose build-time for tools needed during compilation, runtime for dynamic libraries loaded at runtime.
min add --build node
min add --runtime nodeDependencies (19)
| Name | Version | Kind |
|---|---|---|
| base | — | build |
| c-ares | 1.34.7 | runtime |
| coreutils | 9.11 | runtime |
| glibc CVE:5 | 2.43 | runtime |
| gtest | 1.17.0 | runtime |
| icu | 78.3 | runtime |
| libuv | 1.52.1 | runtime |
| lief CVE:1 | 0.17.6 | runtime |
| make | 4.4.1 | build |
| nghttp2 CVE:1 | 1.68.1 | runtime |
| nghttp3 | 1.15.0 | runtime |
| ngtcp2 | 1.22.1 | runtime |
| openssl | 3.6.3 | runtime |
| pkgconf | 2.5.1 | build |
| python CVE:7 | 3.14.6 | build |
| sqlite CVE:3 | 3.50.4 | runtime |
| toolchain | — | build |
| zlib | 1.3.2 | runtime |
| zstd | 1.5.7 | runtime |
Dependency changes
Loading diff…
Could not load the dependency diff for one of the selected versions. Try again.
No dependency changes
The two selected versions have identical direct dependencies.
| Name | Version | Kind |
|---|
Dependants (8)
| Name | Version |
|---|---|
| agent-browser | 0.15.1 |
| bash-language-server | 5.4.3 |
| cf | 0.1.0 |
| mermaid-cli | 11.12.0 |
| next | 16.2.6 |
| pyright | 1.1.398 |
| typescript-language-server | 4.3.3 |
| wrangler | 4.108.0 |
-
- Lines: +13 Deps: 19Released:
- Lines: +1 Deps: 19Released:
- Lines: +2 Deps: 19 ( +1 )Released:
- Lines: +3 / -2 Deps: 18Released:
- Lines: +11 / -1 Deps: 18 ( +4 )Released:
- Lines: +12 / -7 Deps: 14 ( +3 )Released:
-
-
- Lines: +3 / -1 Deps: 11Released:
- Lines: +1 / -1 Deps: 11Released:
- Lines: +2 / -2 Deps: 11 ( -1 )Released:
- Lines: +1 Deps: 12Released:
- Lines: +1 / -1 Deps: 12Released:
- Lines: +1 / -1 Deps: 12Released:
- Lines: +1 / -1 Deps: 12Released:
- Lines: +5 Deps: 12Released:
- Lines: +9 / -2 Deps: 12Released:
- Lines: +6 / -1 Deps: 12Released:
- Lines: +3 Deps: 12Released:
- Lines: +23 / -1 Deps: 12Released:
- Lines: +1 Deps: 12Released:
- Lines: +64 Deps: 12 ( +12 )Released:
-
No direct advisories
This package inherits 10 transitive advisories from its dependencies.
Showing 10 transitive advisories via node's dependencies
No advisories match the current filters.
| Critical ( 1 ) | ||||||
| Status | IDs | Package | Severity | |||
|---|---|---|---|---|---|---|
| Under investigation | glibc | Critical: 9.8 | ||||
Summaryscanf %mc off-by-one heap buffer overflow ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References
| ||||||
| High ( 6 ) | ||||||
| Status | IDs | Package | Severity | |||
| Under investigation | sqlite | High | ||||
SummarySQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate ViaAffected ranges3.50.4 References
| ||||||
| Under investigation | sqlite | High | ||||
SummarySQLite before 3.53.2 Memory Corruption in FTS5 Extension ViaAffected ranges3.50.4 References
| ||||||
| Under investigation | glibc | High: 7.5 | ||||
SummaryPotential buffer under-read in ungetwc ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
| Under investigation | glibc | High: 7.5 | ||||
Summaryiconv crash due to assertion failure with untrusted input ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References
| ||||||
| Under investigation | glibc | High: 7.5 | ||||
Summarygethostbyaddr and gethostbyaddr_r may incorrectly handle DNS response ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | ||||||
| Under investigation | sqlite | High: 7.5 | ||||
SummaryNo summary published for this advisory. ViaAffected ranges3.50.4 CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N References
| ||||||
| Medium ( 2 ) | ||||||
| Status | IDs | Package | Severity | |||
| Under investigation | nghttp2 | Medium | ||||
Summarynghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length ViaAffected ranges1.68.0 – 1.68.1 References
| ||||||
| Under investigation | glibc | Medium: 5.4 | ||||
Summarygethostbyaddr and gethostbyaddr_r return invalid DNS hostnames ViaAffected ranges2.42 – 2.43 CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N | ||||||
| Low ( 1 ) | ||||||
| Status | IDs | Package | Severity | |||
| Under investigation | lief | Low: 3.3 | ||||
SummaryUncontrolled memory allocation in LIEF ELF Note parser (`Note::create`) ViaAffected ranges0.17.5 – 0.17.6 CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L | ||||||
| Unknown ( 0 ) | ||||||
| Status | IDs | Package | Severity | |||
63 components
No components match your filter.
| Packages | Version |
|---|---|
| node ROOT | 25.8.2 |
| acl | 2.4.0 |
| attr | 2.6.0 |
| autoconf | 2.73 |
| automake | 1.18.1 |
| bash | 5.3 |
| bash-bootstrap | 5.3 |
| binutils | 2.46.1 |
| bison | 3.8.2 |
| bzip2 | 1.0.8 |
| c-ares | 1.34.7 |
| cmake | 4.2.7 |
| coreutils | 9.11 |
| curl | 8.21.0 |
| diffutils | 3.12 |
| expat | 2.8.2 |
| file | 5.48 |
| findutils | 4.10.0 |
| flex | 2.6.4 |
| gawk | 5.4.0 |
| gawk-bootstrap | 5.3.2 |
| gcc | 15.2.0 |
| gdbm | 1.26 |
| glibc | 2.43 |
| gmp | 6.3.0 |
| grep | 3.12 |
| gtest | 1.17.0 |
| gzip | 1.14 |
| icu | 78.3 |
| libcap | 2.78 |
| libffi | 3.6.0 |
| libidn2 | 2.3.8 |
| libpsl | 0.22.0 |
| libtool | 2.5.4 |
| libunistring | 1.4.2 |
| libuv | 1.52.1 |
| lief | 0.17.6 |
| linux_headers | 6.12.43 |
| lz4 | 1.10.0 |
| m4 | 1.4.21 |
| make | 4.4.1 |
| meson | 1.10.2 |
| mpc | 1.4.0 |
| mpfr | 4.2.2 |
| ncurses | 6.6 |
| nghttp2 | 1.68.1 |
| nghttp3 | 1.15.0 |
| ngtcp2 | 1.22.1 |
| ninja | 1.13.2 |
| openssl | 3.6.3 |
| pcre2 | 10.47 |
| perl | 5.42.2 |
| pkgconf | 2.5.1 |
| python | 3.14.6 |
| readline | 8.3 |
| sed | 4.10 |
| setuptools | 83.0.0 |
| sqlite | 3.50.4 |
| tar | 1.35 |
| util-linux | 2.42.2 |
| xz | 5.8.3 |
| zlib | 1.3.2 |
| zstd | 1.5.7 |