diff --git a/apps/site/pages/en/blog/vulnerability/december-2025-security-releases.md b/apps/site/pages/en/blog/vulnerability/december-2025-security-releases.md new file mode 100644 index 0000000000000..cad20c421ec96 --- /dev/null +++ b/apps/site/pages/en/blog/vulnerability/december-2025-security-releases.md @@ -0,0 +1,39 @@ +--- +date: 2025-12-08T23:00:00.000Z +category: vulnerability +title: Monday, December 15, 2025 Security Releases +slug: december-2025-security-releases +layout: blog-post +author: The Node.js Project +--- + +# Summary + +The Node.js project will release new versions of the 25.x, 24.x, 22.x, 20.x +releases lines on or shortly after, Monday, December 15, 2025 in order to address: + +- 3 high severity issues. +- 1 low severity issue. +- 1 medium severity issue. + +## Impact + +The 25.x release line of Node.js is vulnerable to 3 high severity issues, 1 low severity issue. +The 24.x release line of Node.js is vulnerable to 3 high severity issues, 1 low severity issue, 1 medium severity issue. +The 22.x release line of Node.js is vulnerable to 3 high severity issues, 1 low severity issue, 1 medium severity issue. +The 20.x release line of Node.js is vulnerable to 3 high severity issues, 1 low severity issue, 1 medium severity issue. + +It's important to note that End-of-Life versions are always affected when a security release occurs. +To ensure your system's security, please use an up-to-date version as outlined in our +[Release Schedule](https://github.com/nodejs/release#release-schedule). + +## Release timing + +Releases will be available on, or shortly after, Monday, December 15, 2025. + +## Contact and future updates + +The current Node.js security policy can be found at . +Please follow the process outlined in if you wish to report a vulnerability in Node.js. + +Subscribe to the low-volume announcement-only nodejs-sec mailing list at to stay up to date on security vulnerabilities and security-related releases of Node.js and the projects maintained in the nodejs GitHub organization. diff --git a/apps/site/site.json b/apps/site/site.json index 22381906522cf..97ec51f6f4400 100644 --- a/apps/site/site.json +++ b/apps/site/site.json @@ -28,10 +28,10 @@ ], "websiteBanners": { "index": { - "startDate": "2025-07-15T00:00:00.000Z", - "endDate": "2025-07-22T00:00:00.000Z", - "text": "July Security Release is available", - "link": "https://nodejs.org/en/blog/vulnerability/july-2025-security-releases", + "startDate": "2025-12-08T23:00:00.000Z", + "endDate": "2025-12-15T23:00:00.000Z", + "text": "New security releases to be made available Monday, December 15, 2025", + "link": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases", "type": "warning" } },