---
title: "Node.js — Node.js 22.23.2 (LTS)"
url: https://daily.dev/posts/node-js-node-js-22-23-2-lts--84txqugm3
source_url: https://nodejs.org/en/blog/release/v22.23.2
type: article
source: "Node.js"
published: 2026-07-29T15:13:37.584Z
updated: 2026-07-29T15:13:59.167Z
tags: ["security", "javascript", "nodejs"]
reading_time: 3
upvotes: 6
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Node.js — Node.js 22.23.2 (LTS)

**[Node.js](https://daily.dev/sources/nodejs)** · 3 min read · 6 upvotes · 0 comments

## Summary

Node.js 22.23.2 (LTS) is a security-only release addressing 10 CVEs across http2, https, permission model, dns, zlib, and http modules. Two high-severity issues affect http2 (memory retention in session accounting and RST stream handling). Three high/medium permission model vulnerabilities are patched. Additional medium fixes cover HTTPS session reuse identity checks, DNS large reply handling, and zlib out-of-bounds writes. Dependencies llhttp (9.4.3) and undici (6.28.0) are also updated.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://nodejs.org/en/blog/release/v22.23.2>

## Similar posts on daily.dev

- [Node.js — Node.js 26.5.1 \(Current\)](https://daily.dev/posts/node-js-node-js-26-5-1-current--hx951gecs) · Node.js · 25 upvotes · 0 comments
- [Node.js — Node.js 22.23.0 \(LTS\)](https://daily.dev/posts/node-js-node-js-22-23-0-lts--djrgvdqy2) · Node.js · 23 upvotes · 3 comments
- [Node.js — Node.js 24.18.1 \(LTS\)](https://daily.dev/posts/node-js-node-js-24-18-1-lts--w2vuxe7f2) · Node.js · 33 upvotes · 5 comments

---

Tags: [#security](https://daily.dev/tags/security), [#javascript](https://daily.dev/tags/javascript), [#nodejs](https://daily.dev/tags/nodejs)

[View this post on daily.dev](https://daily.dev/posts/node-js-node-js-22-23-2-lts--84txqugm3)