v22.15.1

nodejs/nodev22.15.1May 14, 2025by RafaelGSS

AI Summary

This is a security release addressing error handling issues in async crypto operations and missing file system request cleanup.

Key Highlights

Fix error handling on async crypto operations (CVE-2025-23166)
Add missing call to uv_fs_req_cleanup (CVE-2025-23165)

Full Release Notes

This is a security release.

### Notable Changes

* (CVE-2025-23166) fix error handling on async crypto operation
* (CVE-2025-23165) add missing call to uv\_fs\_req\_cleanup

### Commits

* \[[`edaf54da00`](https://github.com/nodejs/node/commit/edaf54da00)] - **fs**: added test for missing call to uv\_fs\_req\_cleanup (Justin Nietzel) [#57811](https://github.com/nodejs/node/pull/57811)
* \[[`9f403e98ef`](https://github.com/nodejs/node/commit/9f403e98ef)] - **(CVE-2025-23165)** **fs**: add missing call to uv\_fs\_req\_cleanup (Justin Nietzel) [#57811](https://github.com/nodejs/node/pull/57811)
* \[[`f4494d38f1`](https://github.com/nodejs/node/commit/f4494d38f1)] - **(CVE-2025-23166)** **src**: fix error handling on async crypto operations (RafaelGSS) [nodejs-private/node-private#709](https://github.com/nodejs-private/node-private/pull/709)