v23.11.1

nodejs/nodev23.11.1May 14, 2025by RafaelGSS

AI Summary

This is a security release addressing error handling issues in async crypto operations and updating c-ares.

Key Highlights

  • Fix error handling on async crypto operations (CVE-2025-23166)
  • Update c-ares to v1.34.5

Full Release Notes

This is a security release.

### Notable Changes

src:

* (CVE-2025-23166) fix error handling on async crypto operation

### Commits

* \[[`a271810ce2`](https://github.com/nodejs/node/commit/a271810ce2)] - **deps**: update c-ares to v1.34.5 (Node.js GitHub Bot) [#57792](https://github.com/nodejs/node/pull/57792)
* \[[`a12107f0dd`](https://github.com/nodejs/node/commit/a12107f0dd)] - **(CVE-2025-23166)** **src**: fix error handling on async crypto operations (RafaelGSS) [nodejs-private/node-private#688](https://github.com/nodejs-private/node-private/pull/688)