CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/node 24.22.1

V8 JavaScript for client and server (meta port)

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 24.21.0_3, update to 24.22.1 not built yet
Upstream
up to date
Last update
to 24.22.1 · ba74741313
Quarterly
2026Q4: 24.21.0_3 · last MFH 5355d058d8
Formerly
www/node7 until 2016-12-07, www/iojs until 2015-09-23
WWW
https://nodejs.org/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install node
installs 24.21.0_3 from latest; from quarterly (2026Q4) 24.21.0_3
Port
# cd /usr/ports/www/node && make install clean
Size
1.2 KiB download · 243 B installed
Depends on
www/node24 24.21.0_3
License
NA

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1624.21.0_324.21.0_3–
FreeBSD 1524.21.0_324.21.0_3–
FreeBSD 1424.21.0_324.21.0_324.21.0_3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 1524.21.0_324.21.0_3–
FreeBSD 1424.21.0_324.21.0_324.21.0_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 24.21.0_3 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 24.21.0_3 is still in the affected range; pkg audit reports it. What does this mean?

Fixed (30)

Show 30 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (436)

Bradley T. Hughes (bhughes) · 13.12.0
www/node: Update 13.10.1_1 -> 13.12.0

https://nodejs.org/en/blog/release/v13.11.0/
https://nodejs.org/en/blog/release/v13.12.0/

Sponsored by:	Miles AS
20b0ec4eca
Rene Ladan (rene) · 13.10.1_1
Clean up ports after FreeBSD 12.0 reached end-of-life.

emulators/mesen is left out for now, as it breaks on 11.3

Submitted by:	rene
Reviewed by:	jbeich, zeising
X-Differential Revision:	https://reviews.freebsd.org/D24211
3c6fba3a38
Jan Beich (jbeich) · 13.10.1_1
devel/icu: update to 66.1

Changes:	http://site.icu-project.org/download/66
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
f821cdc347
Bradley T. Hughes (bhughes) · 13.10.1
www/node: Update 13.9.0 -> 13.10.1

https://nodejs.org/en/blog/release/v13.10.0/
https://nodejs.org/en/blog/release/v13.10.1/

Refresh patches with `make makepatch`.

Sponsored by:	Miles AS
a25306fda7
Bradley T. Hughes (bhughes) · 13.9.0
www/node: Update 13.8.0 -> 13.9.0

https://nodejs.org/en/blog/release/v13.9.0/

Sponsored by:	Miles AS
01238bb28d
Bradley T. Hughes (bhughes) · 13.8.0
www/node: Update 13.7.0 -> 13.8.0

https://nodejs.org/en/blog/release/v13.8.0/

This is a security release. See
https://nodejs.org/en/blog/vulnerability/february-2020-security-releases/

MFH:		2020Q1
Security:	0032400f-624f-11ea-b495-000d3ab229d6
Sponsored by:	Miles AS
07688b5d10
Bradley T. Hughes (bhughes) · 13.7.0
www/node: Update 13.6.0 -> 13.7.0

https://nodejs.org/en/blog/release/v13.7.0/

Sponsored by:	Miles AS
689ecfc02b
Bradley T. Hughes (bhughes) · 13.6.0
www/node: build on i386

A recent change to V8 changed how mapped shared libraries were
discovered on FreeBSD, changing from using /proc/self/maps to using
sysctl with KERN_PROC_VMMAP. Unforcunately, this change fails to build
on i386 (and probably other 32-bit platforms) due to the use of
reinterpret_cast to change uint64_t to uintptr_t. This is an invalid
cast. The uin64_t should be static_cast to uintptr_t for it to work on
all platforms.

While here, bump the libuv dependency that I missed when upgrading to
13.6.0

PR:		243798
Reported by:	Martin Birgmeier <d8zNeCFG@aon.at>
Reported by:	paul beard <paulbeard@gmail.com>
Reported by:	pkg-fallout@FreeBSD.org
Sponsored by:	Miles AS
1634663369
Bradley T. Hughes (bhughes) · 13.6.0
www/node: Update 13.5.0 -> 13.6.0

https://nodejs.org/en/blog/release/v13.6.0/

While here, regenerate patches with `make makepatch`.

Sponsored by:	Miles AS
51057e2cfb
Bradley T. Hughes (bhughes) · 13.5.0
www/node: Update 13.4.0 -> 13.5.0

https://nodejs.org/en/blog/release/v13.5.0/

While here, bump the minimum dependency on libuv and regenerate patches
with `make makepatch`.

Sponsored by:	Miles AS
e3599be0b1
Bradley T. Hughes (bhughes) · 13.4.0
www/node: Update to 13.4.0

https://nodejs.org/en/blog/release/v13.4.0/

Sponsored by:	Miles AS
81c32f0c49
Adam Weinberger (adamw) · 13.3.0
node*: Allow building with ssl=openssl (now 1.1.x)
84796f7a4c
Piotr Kubaj (pkubaj) · 13.3.0
www/node: fix build on powerpc64 elfv1

13.2.0 broke powerpc64 elfv1 (again). The problem are those two commits:
https://github.com/nodejs/node/commit/605cb9f0fcd1d334ec15959bb79ba44b0e9f8186
https://github.com/nodejs/node/commit/fe99841c88fdb87959a14c7bca81e4cd4582eba6

They added ifdefs for _AIX, but the code they guard should run on all ppc64 elfv1 (not only on AIX).

Widen those ifdefs appriopriately so that node builds again.

PR:		242404
Approved by:	bhughes (maintainer)
cf20f36437
Bradley T. Hughes (bhughes) · 13.3.0
www/node: Update 13.2.0 -> 13.3.0

https://nodejs.org/en/blog/release/v13.3.0/

Sponsored by:	Miles AS
7ffd9e3c44
Piotr Kubaj (pkubaj) · 13.2.0
www/node: fix build and runtime when using ELFv2 ABI on powerpc64

Submitted by:   alfredo.junior@eldorado.org.br
Reviewed by:    mikael.urankar@gmail.com
Approved by:    bhughes (maintainer timeout), mentors (implicit approval)
Differential Revision:  https://reviews.freebsd.org/D21588
2fab8881e3
Bradley T. Hughes (bhughes) · 13.2.0
www/node: Update 13.1.0 -> 13.2.0

https://nodejs.org/en/blog/release/v13.2.0/

Sponsored by:	Miles AS
fb383d32ee
Bradley T. Hughes (bhughes) · 13.1.0
www/node: Update 13.0.1 -> 13.1.0

https://nodejs.org/en/blog/release/v13.1.0/

Sponsored by:	Miles AS
3eca1c06ab
Bradley T. Hughes (bhughes) · 13.0.1
www/node: Update 13.0.0 -> 13.0.1

https://nodejs.org/en/blog/release/v13.0.1/

Change the default options on FreeBSD 12.0-RELEASE, since Node.js uses
functions introduced in OpenSSL 1.1.1b, while 12.0-RELEASE only has
1.1.1a.

Sponsored by:	Miles AS
422767ef61
Bradley T. Hughes (bhughes) · 13.0.0
www/node: Update 12.13.0 -> 13.0.0

Update to the latest major release of Node.js, regenerating patches
with `make makepatch` while here.

https://nodejs.org/en/blog/release/v13.0.0/

Sponsored by:	Miles AS
aa9a4716b0
Bradley T. Hughes (bhughes) · 12.13.0
www/node12: copy from www/node

Create a new port for the latest Node.js 12.13.0 LTS release. Update
CONFLICTS for the existing Node.js ports to include the new node12 port.

https://nodejs.org/en/blog/release/v12.13.0/

Sponsored by:	Miles AS
6c43005148
Bradley T. Hughes (bhughes) · 12.13.0
www/node: Update 12.12.0 -> 12.13.0

Update to the latest LTS release of Node.js. Regenerate patches with
`make makepatch`.

https://nodejs.org/en/blog/release/v12.13.0/

Sponsored by:	Miles AS
4ec6c5d159
Bradley T. Hughes (bhughes) · 12.12.0
www/node: Update 12.11.1 -> 12.12.0

https://nodejs.org/en/blog/release/v12.12.0/

Sponsored by:	Miles AS
4954c1a669
Bradley T. Hughes (bhughes) · 12.11.1
www/node: Update 12.10.0_1 -> 12.11.1

https://nodejs.org/en/blog/release/v12.11.0/
https://nodejs.org/en/blog/release/v12.11.1/

Sponsored by:	Miles AS
c2bbf3d901
Jan Beich (jbeich) · 12.10.0_1
devel/icu: update to 65.1

Changes:	http://site.icu-project.org/download/65
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
4bbb4133b2
Jan Beich (jbeich) · 12.10.0
Drop C++11 workaround for GCC < 6 after r449590

lang/gcc5 will expire in ~1 month. If someone still uses lang/gcc48
they should backport C++11 fix instead. QA on GCC architecuters is
currently limited to powerpc64 which uses GCC_DEFAULT.

PR:		193528
e5688543b0
Bradley T. Hughes (bhughes) · 12.10.0
www/node: Update 12.9.1 -> 12.10.0

https://nodejs.org/en/blog/release/v12.10.0/

Sponsored by:	Miles AS
a07286c93a
Bradley T. Hughes (bhughes) · 12.9.1
www/node: Update 12.9.0 -> 12.9.1

This release fixes two regressions in the http module. See the release
notes for more details:

https://nodejs.org/en/blog/release/v12.9.1/

Sponsored by:	Miles AS
858934f559
Bradley T. Hughes (bhughes) · 12.9.0
www/node: Update 12.8.1 -> 12.9.0

https://nodejs.org/en/blog/release/v12.9.0/

Regenerate patches with `make makepatch`, taking care to keep patches
for files that have moved after Node.js upgraded the bundled V8
dependency.

Sponsored by:	Miles AS
8f04a50c2e
Bradley T. Hughes (bhughes) · 12.8.1
www/node: Update 12.8.0 -> 12.8.1

This is a security release. All Node.js users should consult the security
release summary at
https://nodejs.org/en/blog/vulnerability/aug-2019-security-releases/
for details on patched vulnerabilities.

MFH:		2019Q3
Security:	c97a940b-c392-11e9-bb38-000d3ab229d6
Sponsored by:	Miles AS
0f87d82292
Bradley T. Hughes (bhughes) · 12.8.0
www/node: Update 12.7.0 -> 12.8.0

https://nodejs.org/en/blog/release/v12.8.0/

The bundled OpenSSL configuration now includes BSD-x86, which this port
can now use. The build for i386 is still using the no-asm variant for
the time being. Assembler errors in BSD-x86/asm-avx2 need to be
investigated to be able to enable asm with the bundled OpenSSL.

While here, regenerate all remaining patches with `make makepatch`.

Sponsored by:	Miles AS
e57ea4c15b
Mathieu Arnold (mat) · 12.7.0
Convert to UCL & cleanup pkg-message (categories w)
a400cfc5f4
Bradley T. Hughes (bhughes) · 12.7.0
www/node: Update 12.6.0_1 -> 12.7.0

https://nodejs.org/en/blog/release/v12.7.0/
0026b8cff2
Gerald Pfeifer (gerald) · 12.6.0_1
Bump PORTREVISION for ports depending on the canonical version of GCC as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3 to GCC 9.1 under most circumstances now after revision 507371.

This includes ports
 - with USE_GCC=yes or USE_GCC=any,
 - with USES=fortran,
 - using Mk/bsd.octave.mk which in turn features USES=fortran, and
 - with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
   c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.

PR:		238330
ea8c8ec7da
Bradley T. Hughes (bhughes) · 12.6.0
www/node: Update 12.4.0 -> 12.6.0

https://nodejs.org/en/blog/release/v12.5.0/
https://nodejs.org/en/blog/release/v12.6.0/

Sponsored by:	Miles AS
bba52fd208
Bradley T. Hughes (bhughes) · 12.4.0
www/node: Update 12.3.1 -> 12.4.0

https://nodejs.org/en/blog/release/v12.4.0/

Sponsored by:	Miles AS
b8dc46fabe
Bradley T. Hughes (bhughes) · 12.3.1
www/node: Update 12.2.0 -> 12.3.1

https://nodejs.org/en/blog/release/v12.3.0/
https://nodejs.org/en/blog/release/v12.3.1/
Sponsored by:	Miles AS
d8ed0f91e3
Antoine Brodin (antoine) · 12.2.0
Revert r502354 and unbreak INDEX
06dd90524d
Bradley T. Hughes (bhughes) · 12.2.0
Remove www/node6

This port reached end-of-life upstream on 2019-04-30. Remove node6-*
from CONFLICTS for the remaining www/node* ports.

Sponsored by:	Miles AS
f10bed8b00
Bradley T. Hughes (bhughes) · 12.2.0
www/node: fix build on powerpc64

Upstream broke powerpc64 big-endian. Replace the check for AIX with
check for big-endian PPC64 to fix the build.

PR:		237586
Submitted by:	pkubaj
Sponsored by:	Miles AS
508fbed075
Bradley T. Hughes (bhughes) · 12.2.0
www/node: Update 12.1.0 -> 12.2.0

https://nodejs.org/en/blog/release/v12.2.0/

Sponsored by:	Miles AS
d5c4e3e885
Bradley T. Hughes (bhughes) · 12.1.0
www/node: Update 12.0.0 -> 12.1.0

https://nodejs.org/en/blog/release/v12.1.0/

Sponsored by:	Miles AS
6cf6d70012
Bradley T. Hughes (bhughes) · 12.0.0
www/node: Update 11.14.0 -> 12.0.0

Update to the latest major release of Node.js, which includes many
significant changes. Users are encouraced to read the release
announcement before upgrading.

https://nodejs.org/en/blog/release/v12.0.0/

Update minimum version requirements for dependencies. Regenerate patches
with `make makepatch`.

Sponsored by:	Miles AS
704cd65eb7
Bradley T. Hughes (bhughes) · 11.14.0
www/node: Update 11.13.0 -> 11.14.0

https://nodejs.org/en/blog/release/v11.14.0/

Sponsored by:	Miles AS
f59b89cdc2
Bradley T. Hughes (bhughes) · 11.13.0
www/node: Update 11.12.0_1 -> 11.13.0

https://nodejs.org/en/blog/release/v11.13.0/

Sponsored by:	Miles AS
6deae3a895
Bradley T. Hughes (bhughes) · 11.12.0_1
www/node*: specify minimum versions of dependencies in BUILD_DEPENDS

Add BUILD_DEPENDS for all LIB_DEPENDS, specifying the minimum version as
the version bundled with a particlar version of Node.js. This should help
people building from ports with out-of-date dependencies with a helpful
message instead of build failures.

Reported by:	freebsd-ports@
Sponsored by:	Miles AS
32926c7289
Jan Beich (jbeich) · 11.12.0_1
devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479
480c577baa
Bradley T. Hughes (bhughes) · 11.12.0
www/node: Update 11.11.0 -> 11.12.0

https://nodejs.org/en/blog/release/v11.12.0/

Sponsored by:	Miles AS
3030c90a1a
Bradley T. Hughes (bhughes) · 11.11.0
www/node: set environment variables for host build

The Node.js build system supports cross-compilation via node-gyp, which
picks up CC, CXX, LINK, C*FLAGS, and LDFLAGS from the environment for the
target build, but not for the host. We need to set the environment variables
for the "host" build.

This unbreaks the build on powerpc64.

PR:		233650
Reported by:	Piotr Kubaj <pkubaj@anongoth.pl>
Sponsored by:	Miles AS
Differential Revision:	https://reviews.freebsd.org/D19250
bae57de69e
Bradley T. Hughes (bhughes) · 11.11.0
www/node: Update 11.10.1 -> 11.11.0

https://nodejs.org/en/blog/release/v11.11.0/

Sponsored by:	Miles AS
945ec4e76d
Bradley T. Hughes (bhughes) · 11.10.1
www/node: Update 11.10.0 -> 11.10.1

This is a security release. All Node.js users should consult the security
release summary at
https://nodejs.org/en/blog/vulnerability/february-2019-security-releases/
for details on patched vulnerabilities.

MFH:		2019Q1
Security:	b71d7193-3c54-11e9-a3f9-00155d006b02
Sponsored by:	Miles AS
9a0115a4ba