Port details

www/node 24.22.1

V8 JavaScript for client and server (meta port)

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: sunpoet@FreeBSD.org
Packages: latest: 24.21.0_3, update to 24.22.1 not built yet
Upstream: up to date
Last update: 2026-10-25 to 24.22.1 · ba74741313
Quarterly: 2026Q4: 24.21.0_3 · last MFH 2026-10-25 5355d058d8
Formerly: www/node7 until 2016-12-07, www/iojs until 2015-09-23
WWW: https://nodejs.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install node

installs 24.21.0_3 from latest; from quarterly (2026Q4) 24.21.0_3

Port

# cd /usr/ports/www/node && make install clean

Size

1.2 KiB download · 243 B installed

Depends on

www/node24 24.21.0_3

License

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	24.21.0_3	24.21.0_3	–
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 24.21.0_3 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 24.21.0_3 is still in the affected range; pkg audit reports it. What does this mean?

Node.js -- multiple vulnerabilitiesentered 2026-10-24

CVE-2026-105481, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106070, CVE-2026-106071, CVE-2026-106072, CVE-2026-106073, CVE-2026-106074, CVE-2026-111497

Fixed (30)

Show 30 fixed

VuXML entries whose affected range the packaged version has left.

NodeJS -- Vulnerabilitiesentered 2024-03-01

CVE-2023-46809, CVE-2024-21890, CVE-2024-21891, CVE-2024-21892, CVE-2024-21896, CVE-2024-22017, CVE-2024-22019, CVE-2024-22025

Node.js -- July 7th 2022 Security Releasesentered 2022-07-08

CVE-2022-2097, CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32222

Node.js -- January 2022 Security Releasesentered 2022-02-12

CVE-2021-44531, CVE-2021-44532, CVE-2021-44533, CVE-2022-21824

Node.js -- October 2021 Security Releasesentered 2021-10-14

CVE-2021-22959, CVE-2021-22960

Node.js -- July 2021 Security Releasesentered 2021-09-21

CVE-2021-22918, CVE-2021-22921, CVE-2021-23362, CVE-2021-27290

Node.js -- August 2021 Security Releasesentered 2021-09-21

CVE-2021-22931, CVE-2021-22939, CVE-2021-22940

Node.js -- July 2021 Security Releases (2)entered 2021-09-21

CVE-2021-22930

Node.js -- April 2021 Security Releasesentered 2021-04-07

CVE-2020-7774, CVE-2021-3449, CVE-2021-3450

Node.js -- February 2021 Security Releasesentered 2021-03-09

CVE-2021-22883, CVE-2021-22884, CVE-2021-23840

Node.js -- January 2021 Security Releasesentered 2021-01-14

CVE-2020-1971, CVE-2020-8265, CVE-2020-8287

Node.js -- November 2020 Security Releasesentered 2020-11-21

CVE-2020-8277

Node.js -- September 2020 Security Releasesentered 2020-09-16

CVE-2020-8201, CVE-2020-8251, CVE-2020-8252

Node.js -- June 2020 Security Releasesentered 2020-06-12

CVE-2020-10531, CVE-2020-11080, CVE-2020-8172, CVE-2020-8174

Node.js -- multiple vulnerabilitiesentered 2020-03-09

CVE-2019-15604, CVE-2019-15605, CVE-2019-15606

Node.js -- multiple vulnerabilitiesentered 2019-08-21

CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518

Node.js -- multiple vulnerabilitiesentered 2019-03-03

CVE-2019-1559, CVE-2019-5737, CVE-2019-5739

node.js -- multiple vulnerabilitiesentered 2018-12-10

CVE-2018-0734, CVE-2018-0735, CVE-2018-12116, CVE-2018-12120, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123, CVE-2018-5407

node.js -- multiple vulnerabilitiesentered 2018-08-25

CVE-2018-0732, CVE-2018-12115, CVE-2018-7166

node.js -- multiple vulnerabilitiesentered 2018-06-15

CVE-2018-1000168, CVE-2018-7161, CVE-2018-7162, CVE-2018-7164, CVE-2018-7167

node.js -- multiple vulnerabilitiesentered 2018-03-28

CVE-2018-7158, CVE-2018-7159, CVE-2018-7160

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017entered 2017-12-14

CVE-2017-15896, CVE-2017-15897, CVE-2017-3738

Node.js -- remote DOS security vulnerabilityentered 2017-10-25

CVE-2017-14919

node -- access to unintended filesentered 2017-10-10

CVE-2017-14849

node.js -- multiple vulnerabilitiesentered 2017-07-12

no CVE referenced

node.js -- multiple vulnerabilitiesentered 2016-10-28

CVE-2016-5172

node -- multiple vulnerabilitiesentered 2016-03-14

CVE-2016-0702, CVE-2016-0705, CVE-2016-0797

node, iojs, and v8 -- denial of serviceentered 2015-07-06

CVE-2015-5380

node.js -- DoS Vulnerabilityentered 2013-10-19

no CVE referenced

node -- private information disclosureentered 2012-05-07

no CVE referenced

Multiple implementations -- DoS via hash algorithm collisionentered 2012-01-16

CVE-2011-4815, CVE-2011-4838, CVE-2011-5036, CVE-2011-5037

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (436)

2021-04-07 20:58Bradley T. Hughes (bhughes) · 15.14.0

www/node: Update 15.13.0 -> 15.14.0

https://nodejs.org/en/blog/release/v15.14.0/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/april-2021-security-releases/

MFH:		2021Q2
Security:	c0c1834c-9761-11eb-acfd-0022489ad614
Sponsored by:	Miles AS

882400377c

2021-04-07 10:09Mathieu Arnold (mat) · 15.13.0

One more small cleanup, forgotten yesterday. Reported by:	lwhsu

cf118ccf87

2021-04-06 16:31Mathieu Arnold (mat) · 15.13.0

Remove # $FreeBSD$ from Makefiles.

305f148f48

2021-04-06 09:29Bradley T. Hughes (bhughes) · 15.13.0

www/node: Update 15.12.0 -> 15.13.0

https://nodejs.org/en/blog/release/v15.13.0/

Remove files/patch-tools_genv8constants.py which had a change that was
incompatible with an upstream change to make the tool compatible with
Python 3.

Sponsored by:	Miles AS

dda06a776c

2021-03-23 09:44Bradley T. Hughes (bhughes) · 15.12.0

www/node: Update 15.11.0 -> 15.12.0

https://nodejs.org/en/blog/release/v15.12.0/

Sponsored by:	Miles AS

bb5f68d753

2021-03-09 20:02Bradley T. Hughes (bhughes) · 15.11.0

www/node: Update 15.10.0 -> 15.11.0

https://nodejs.org/en/blog/release/v15.11.0/

Sponsored by:	Miles AS

1a25db7d81

2021-03-09 07:49Bradley T. Hughes (bhughes) · 15.10.0

www/node: Update 15.9.0 -> 15.10.0

https://nodejs.org/en/blog/release/v15.10.0/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/

While here, pet portlint by moving USES.

PR:		254045
Submitted by:	jlduran@gmail.com
MFH:		2021Q1
Security:	2f3cd69e-7dee-11eb-b92e-0022489ad614
Sponsored by:	Miles AS

edbcbbd70f

2021-02-24 20:58Bradley T. Hughes (bhughes) · 15.9.0

www/node: Update 15.8.0 - 15.9.0

https://nodejs.org/en/blog/release/v15.9.0/

Sponsored by:	Miles AS

ce58371590

2021-02-04 11:52Bradley T. Hughes (bhughes) · 15.8.0

www/node: Update 15.7.0 -> 15.8.0

https://nodejs.org/en/blog/release/v15.8.0/

Regenerate patches with `make makepatch` and re-introduce the
dependency on dns/c-ares now that it is at version 1.17.1 (the
minimum required version for Node.js).

Sponsored by:	Miles AS

fc27e30c9c

2021-01-30 00:35Bradley T. Hughes (bhughes) · 15.7.0

www/node: Update 15.6.0 -> 15.7.0

https://nodejs.org/en/blog/release/v15.7.0/

Sponsored by:	Miles AS

bad77bade8

2021-01-18 21:10Bradley T. Hughes (bhughes) · 15.6.0

www/node: Update 15.5.1 -> 15.6.0

https://nodejs.org/en/blog/release/v15.6.0/

MFH:		2021Q1
Sponsored by:	Miles AS

e0da370be1

2021-01-14 22:20Bradley T. Hughes (bhughes) · 15.5.1

www/node: Update 15.5.0 -> 15.5.1

https://nodejs.org/en/blog/release/v15.5.1/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/january-2021-security-releases/

PR:		252681
MFH:		2021Q1
Security:	08b553ed-537a-11eb-be6e-0022489ad614
Sponsored by:	Miles AS

80bf19f40f

2021-01-04 21:41Bradley T. Hughes (bhughes) · 15.5.0

www/node: Update 15.4.0 -> 15.5.0

https://nodejs.org/en/blog/release/v15.5.0/

MFH:		2021Q1
Sponsored by:	Miles AS

50dce0595b

2020-12-10 14:35Bradley T. Hughes (bhughes) · 15.4.0

www/node: Update 15.3.0 -> 15.4.0

https://nodejs.org/en/blog/release/v15.4.0/

Sponsored by:	Miles AS

e9c7c1a40e

2020-11-24 23:29Bradley T. Hughes (bhughes) · 15.3.0

www/node: Update 15.2.1 -> 15.3.0

https://nodejs.org/en/blog/release/v15.3.0/

Sponsored by:	Miles AS

17f411cd6a

2020-11-21 23:29Bradley T. Hughes (bhughes) · 15.2.1

www/node: Update 15.2.0 -> 15.2.1

https://nodejs.org/en/blog/release/v15.2.1/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/november-2020-security-releases/

MFH:		2020Q4
Security:	ad792169-2aa4-11eb-ab71-0022489ad614
Sponsored by:	Miles AS

dcd96f06d2

2020-11-11 23:53Bradley T. Hughes (bhughes) · 15.2.0

www/node: Update 15.1.0 -> 15.2.0

https://nodejs.org/en/blog/release/v15.2.0/

Sponsored by:	Miles AS

ede41ae3c5

2020-11-11 22:19Bradley T. Hughes (bhughes) · 15.1.0

www/node: Update 15.0.1_1 -> 15.1.0

https://nodejs.org/en/blog/release/v15.1.0/

Sponsored by:	Miles AS

16fda1df91

2020-11-03 01:56Jan Beich (jbeich) · 15.0.1_1

devel/icu: update to 68.1

Changes:	http://site.icu-project.org/download/68
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

6d5d6429d5

2020-11-02 14:03Piotr Kubaj (pkubaj) · 15.0.1

www/node: fix build on powerpc64le

Building with DTRACE causes crash. -mminimal-toc is valid only on powerpc64 elfv1.

6571551cb2

2020-10-29 23:25Bradley T. Hughes (bhughes) · 15.0.1

www/node: Update 15.0.0 -> 15.0.1

https://nodejs.org/en/blog/release/v15.0.1/

Sponsored by:	Miles AS

80ef916987

2020-10-29 22:32Bradley T. Hughes (bhughes) · 15.0.0

www/node: Update 14.14.0 -> 15.0.0

Update to the latest major release of Node.js, which includes many
significant changes. Users are encouraged to read the release notes
before upgrading.

https://nodejs.org/en/blog/release/v15.0.0/

While here, refresh existing patches with `make makepatch`, removing
some powerpc* related patches that have been adopted/reworked upstream
in V8.

Remove the dependency on dns/c-ares and use the bundled version
instead, since Node.js has adopted a change to c-ares that has not yet
been released. The dependency will be re-added once dns/c-ares has
been updated to a release that contains support for CAA DNS records.

An UPDATING entry has also been added to include a notice about this
major version upgrade, and steps users can take to continue using the
v14.x line, which is now LTS.

Sponsored by:	Miles AS

fd2545d237

2020-10-29 14:57Bradley T. Hughes (bhughes) · 14.14.0

www/node14: copy from www/node, update 14.14.0 -> 14.15.0 (LTS)

Create a new port for the latest Node.js 14.15.0 LTS release. Update
CONFLICTS for the existing Node.js ports to include the new node14 port
and remove non-existent ports.

https://nodejs.org/en/blog/release/v14.15.0/

Sponsored by:	Miles AS

2ef526793b

2020-10-19 23:08Bradley T. Hughes (bhughes) · 14.14.0

www/node: Update 14.13.1 -> 14.14.0

https://nodejs.org/en/blog/release/v14.14.0/

This release fixes the build with Python 3.9, as reported in PR 250391.

PR:		250391
Reported by:	fluffy
Sponsored by:	Miles AS

498d1afac0

2020-10-15 21:01Bradley T. Hughes (bhughes) · 14.13.1

www/node: Update 14.13.0 -> 14.13.1

https://nodejs.org/en/blog/release/v14.13.1/

Sponsored by:	Miles AS

1d3f3ff804

2020-09-30 07:06Bradley T. Hughes (bhughes) · 14.13.0

www/node: Update 14.12.0 -> 14.13.0

https://nodejs.org/en/blog/release/v14.13.0/

Sponsored by:	Miles AS

3a6da577db

2020-09-27 22:52Mark Linimon (linimon) · 14.12.0

Allow building on powerpc64le.

Approved by:	portmgr (tier-2 blanket)

0fdf603cb9

2020-09-25 11:50Bradley T. Hughes (bhughes) · 14.12.0

www/node: Update 14.11.0 -> 14.12.0

https://nodejs.org/en/blog/release/v14.12.0/

Sponsored by:	Miles AS

909ac510ac

2020-09-16 22:53Bradley T. Hughes (bhughes) · 14.11.0

www/node: Update 14.10.1 -> 14.11.0

https://nodejs.org/en/blog/release/v14.11.0/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/

MFH:		2020Q3
Security:	4ca5894c-f7f1-11ea-8ff8-0022489ad614
Sponsored by:	Miles AS

c2de76cbb8

2020-09-15 08:44Bradley T. Hughes (bhughes) · 14.10.1

www/node: Update 14.10.0_1 -> 14.10.1

https://nodejs.org/en/blog/release/v14.10.1/

Sponsored by:	Miles AS

89ce5ef322

2020-09-08 23:19Bradley T. Hughes (bhughes) · 14.10.0_1

www/node: add dependency on archivers/brotli

... instead of building the version bundled with Node.js. Bump
PORTREVISION due to the new dependency.

Sponsored by:	Miles AS

5e90ec7af1

2020-09-08 22:07Bradley T. Hughes (bhughes) · 14.10.0

www/node: Update 14.9.0 -> 14.10.0

https://nodejs.org/en/blog/release/v14.10.0/

While here, refresh patches with `make makepatch`.

Sponsored by:	Miles AS

2aa060424b

2020-09-04 22:53Bradley T. Hughes (bhughes) · 14.9.0

www/node: Update 14.8.0 -> 14.9.0

https://nodejs.org/en/blog/release/v14.9.0/

Sponsored by:	Miles AS

5dc5ba0a96

2020-08-20 23:27Bradley T. Hughes (bhughes) · 14.8.0

www/node: build with python < 3.7

r535334 introduced a patch for tools/genv8constants.py that only worked
with Python >= 3.7. The "text" argument added to Python's
subprocess.Popen() is an alias for "universal_newlines", which works on
all versions of Python, including 2.7.

PR:		248167
Submitted by:	James French <james@french.id.au>
Reported by:	Miroslav Lachman <000.fbsd@quip.cz>
MFH:		2020Q3
Sponsored by:	Miles AS

cf0353320d

2020-08-20 22:40Bradley T. Hughes (bhughes) · 14.8.0

www/node: Update 14.7.0 -> 14.8.0

https://nodejs.org/en/blog/release/v14.8.0/

Sponsored by:	Miles AS

4310379341

2020-08-20 20:50Bradley T. Hughes (bhughes) · 14.7.0

www/node: Update 14.6.0_1 -> 14.7.0

https://nodejs.org/en/blog/release/v14.7.0/

Sponsored by:	Miles AS

71386cf73a

2020-07-30 00:08Bradley T. Hughes (bhughes) · 14.6.0_1

www/node: Update 14.6.0 -> 14.6.0_1

Bump PORTREVISION after updating the minimum version requirements for
libuv, libnghttp2, and libcares.

The previous change for www/node erroneously mentioned the most recent
www/node10 update. The correct changelog should have read:

www/node: Update 14.5.0 -> 14.6.0

https://nodejs.org/en/blog/release/v14.6.0/

Sponsored by:	Miles AS

f55f2f827a

2020-07-29 23:46Bradley T. Hughes (bhughes) · 14.6.0

www/node10: Update 10.21.0 -> 10.22.0

https://nodejs.org/en/blog/release/v10.22.0/

Sponsored by:	Miles AS

058ee04d2f

2020-07-07 00:19Bradley T. Hughes (bhughes) · 14.5.0

www/node: Update 14.4.0 -> 14.5.0

https://nodejs.org/en/blog/release/v14.5.0/

Refresh patches with `make makepatch`, and adapt them to the changes
from upstream due to the V8 upgrade.

Sponsored by:	Miles AS

0e16d9b8ac

2020-06-12 13:31Bradley T. Hughes (bhughes) · 14.4.0

www/node: Update 14.3.0 -> 14.4.0

https://nodejs.org/en/blog/release/v14.4.0/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/

MFH:		2020Q2
Security:	11fcfa8f-ac64-11ea-9dab-000d3ab229d6
Sponsored by:	Miles AS

615fad4036

2020-06-11 15:45Bradley T. Hughes (bhughes) · 14.3.0

www/node: Update 14.2.0 -> 14.3.0

https://nodejs.org/en/blog/release/v14.3.0/

Sponsored by:	Miles AS

973ec248b4

2020-06-11 14:07Bradley T. Hughes (bhughes) · 14.2.0

www/node: Update 14.1.0 -> 14.2.0

https://nodejs.org/en/blog/release/v14.2.0/

Sponsored by:	Miles AS

792390a049

2020-06-11 07:46Bradley T. Hughes (bhughes) · 14.1.0

www/node: Update 14.0.0 -> 14.1.0

https://nodejs.org/en/blog/release/v14.1.0/

Sponsored by:	Miles AS

55f8228d00

2020-06-10 00:04Bradley T. Hughes (bhughes) · 14.0.0

www/node: Update 13.14.0 -> 14.0.0

Upgrade to the latest major vesrion of Node.js. Regenerate patches
since some have been adopted upstream, while others needed refreshing.

Adopt a patch from a newer Node.js version to allow the port to build
with either ICU 66.1 or 67.1.

https://nodejs.org/en/blog/release/v14.0.0/

Sponsored by:	Miles AS

6cf3404dd0

2020-06-04 23:12Bradley T. Hughes (bhughes) · 13.14.0

www/node: Update 13.13.0_1 -> 13.14.0

https://nodejs.org/en/blog/release/v13.14.0/

Refresh patches with `make makepatch`, and remove
patch-deps_v8_src_objects_js-number-format.cc which has been applied
upstream.

Sponsored by:	Miles AS

54c15ccb38

2020-05-15 22:33Bradley T. Hughes (bhughes) · 13.13.0_1

www/node: use python 3 as build dependency

Do not depend on the deprecated python 2.7 package to build Node.js,
patching tools/genv8constants.py to continue to work and generate the
same output with python 3 that it did with python 2.

While here, add all *.py scripts used by the build to SHEBANG_FILES,
which causes the installed lldb_commands.py script to change, hence the
PORTREVISION bump.

PR:		246036
Reported by:	lumiwa@gmail.com
Sponsored by:	Miles AS

688f3b4e5e

2020-05-06 20:09Ed Maste (emaste) · 13.13.0

www/node*: add binutils dep on objdump

/usr/bin/objdump will be removed from FreeBSD before FreeBSD 13.0.

PR:		241157
Approved by:	bapt
Sponsored by:	The FreeBSD Foundation

14b2b2aa64

2020-05-03 06:03Fukang Chen (loader) · 13.13.0

www/node, www/node12: Fix build on armv6 and armv7

Reviewed by:	koobs, bhughes
Approved by:	koobs (ports, mentor), bhughes (maintainer)
Differential Revision:	https://reviews.freebsd.org/D24612
MFH:		2020Q2

70b0d7edf1

2020-04-29 21:51Bradley T. Hughes (bhughes) · 13.13.0

www/node: Update 13.12.0_1 -> 13.13.0

https://nodejs.org/en/blog/release/v13.13.0/

Sponsored by:	Miles AS

0107b23d14

2020-04-23 22:14Jan Beich (jbeich) · 13.12.0_1

devel/icu: update to 67.1

Changes:	http://site.icu-project.org/download/67
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
Reported by:	GitHub (watch releases)

ffb8eb82e5

sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23
deskutils/xdg-desktop-portal 2 CVEs · 8.8 fixed 1.22.1	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21