From: Hirokazu MORIKAWA <redacted>
Date: Mon, 22 Jun 2026 11:36:36 +0000 (+0900)
Subject: node: bump to 22.23.0
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=a408cf014bbf859b4c36453c4aa264c9349cf642;p=openwrt-packages.git

node: bump to 22.23.0

This is a security release.
Notable Changes

    (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High
    (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High
    (CVE-2026-48937) deps: fix integration issues with the latest nghttp2 – Medium
    (CVE-2026-48930) dns,net: reject hostnames with embedded NUL bytes (Matteo Collina) – Medium
    (CVE-2026-48619) http2: cap originSet size to prevent unbounded memory growth (Matteo Collina) – Medium
    (CVE-2026-48615) lib,test: redact proxy credentials in tunnel errors (Matteo Collina) – Medium
    (CVE-2026-48934) tls: bind reusable sessions to authenticated host (Matteo Collina) – Medium
    (CVE-2026-48928) tls: fix case-sensitive SNI context matching (Matteo Collina) – Medium
    (CVE-2026-48617) permission: handle process.chdir on writereport (RafaelGSS) – Low
    (CVE-2026-48931) http: fix response queue poisoning in http.Agent (Matteo Collina) – Low
    (CVE-2026-48935) permission: disable FileHandle utimes with permission model (RafaelGSS) – Low

Signed-off-by: Hirokazu MORIKAWA <redacted>
---

diff --git a/lang/node/Makefile b/lang/node/Makefile
index ac4550d70..80f644305 100644
--- a/lang/node/Makefile
+++ b/lang/node/Makefile
@@ -8,15 +8,15 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=node
-PKG_VERSION:=22.22.2
+PKG_VERSION:=22.23.0
 PKG_RELEASE:=1
 NODE_MODULE_VERSION:=127
 
 PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://nodejs.org/dist/v$(PKG_VERSION)
-PKG_HASH:=f4b9606f33aef725a77b6292460102b48b80902571a8bb94cd769837ee0577df
+PKG_HASH:=61fd42cd1c3ff04a849f5ad5d08c58b111831944b5b94bc90fc623eab41418a2
 PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-v$(PKG_VERSION)
-NODEJS_BIN_SUM:=978978a635eef872fa68beae09f0aad0bbbae6757e444da80b570964a97e62a3
+NODEJS_BIN_SUM:=535eeb608ca1e0b71d49a0e36991d449d5f935fbb04eca61677519b010cd673a
 HOST_BUILD_DIR:=$(BUILD_DIR_HOST)/$(PKG_NAME)-v$(PKG_VERSION)
 
 PKG_MAINTAINER:=Hirokazu MORIKAWA <morikw2@gmail.com>, Adrian Panella <ianchi74@outlook.com>