Node.js 26.x — End of Life
Active High riskNode.js 26.x is still supported until Apr 30, 2029, in 936 days. The most recent release in this series is 26.10.0. 4 CVEs are tracked for this series.
Node.js 26.x — All releases
| Version | Released | Active support | EOL date | Latest patch | Status | Alert me |
|---|---|---|---|---|---|---|
| 26LTS | May 5, 2026 | Oct 27, 2027 | Apr 30, 2029 | 26.10.0 | Active |
CVEs affecting Node.js 26.x (4)
| CVE | Severity | CVSS | EPSS | KEV | Cycle | Description | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-58043 | HIGH | 8.4 | 0.15% | — | 26 | A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. … | Jul 30, 2026 |
| CVE-2026-56850 | MEDIUM | 4.4 | 0.08% | — | 26 | A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) cli… | Jul 30, 2026 |
| CVE-2026-56847 | MEDIUM | 6.1 | 0.15% | — | 26 | A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside … | Jul 30, 2026 |
| CVE-2026-48617 | HIGH | 8.2 | 0.31% | — | 26 | A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This… | Jun 18, 2026 |
Add a Node.js 26 EOL badge to your README
Show your users which Node.js version your project runs and whether it is still supported. The badge updates automatically. More formats and options →
[](https://eolcanary.com/explore/nodejs/26)Frequently asked questions
Is Node.js 26 end of life?
No. Node.js 26.x is still supported until April 30, 2029. It continues to receive security patches and bug fixes.
What CVEs affect Node.js 26?
There are 4 CVEs tracked for Node.js 26.x. See the full list above with CVSS and EPSS scores.
What is the latest Node.js 26 version?
The latest Node.js 26.x patch release is 26.10.0, released on September 22, 2026. Always run the latest patch to benefit from all security fixes.
When was Node.js 26 first released?
Node.js 26 was released on May 5, 2026. See the full version timeline in the table above.
Is it safe to run Node.js 26 in production?
Yes, Node.js 26 is still supported. Support ends on April 30, 2029. Make sure you run the latest patch (26.10.0) to have all security fixes applied.
Data sourced from endoflife.date · CVE data from NVD · EPSS from FIRST.org · KEV from CISA