Port details

www/node 24.22.1

V8 JavaScript for client and server (meta port)

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: sunpoet@FreeBSD.org
Packages: latest: 24.21.0_3, update to 24.22.1 not built yet
Upstream: up to date
Last update: 2026-10-25 to 24.22.1 · ba74741313
Quarterly: 2026Q4: 24.21.0_3 · last MFH 2026-10-25 5355d058d8
Formerly: www/node7 until 2016-12-07, www/iojs until 2015-09-23
WWW: https://nodejs.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install node

installs 24.21.0_3 from latest; from quarterly (2026Q4) 24.21.0_3

Port

# cd /usr/ports/www/node && make install clean

Size

1.2 KiB download · 243 B installed

Depends on

www/node24 24.21.0_3

License

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	24.21.0_3	24.21.0_3	–
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 24.21.0_3 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 24.21.0_3 is still in the affected range; pkg audit reports it. What does this mean?

Node.js -- multiple vulnerabilitiesentered 2026-10-24

CVE-2026-105481, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106070, CVE-2026-106071, CVE-2026-106072, CVE-2026-106073, CVE-2026-106074, CVE-2026-111497

Fixed (30)

Show 30 fixed

VuXML entries whose affected range the packaged version has left.

NodeJS -- Vulnerabilitiesentered 2024-03-01

CVE-2023-46809, CVE-2024-21890, CVE-2024-21891, CVE-2024-21892, CVE-2024-21896, CVE-2024-22017, CVE-2024-22019, CVE-2024-22025

Node.js -- July 7th 2022 Security Releasesentered 2022-07-08

CVE-2022-2097, CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32222

Node.js -- January 2022 Security Releasesentered 2022-02-12

CVE-2021-44531, CVE-2021-44532, CVE-2021-44533, CVE-2022-21824

Node.js -- October 2021 Security Releasesentered 2021-10-14

CVE-2021-22959, CVE-2021-22960

Node.js -- July 2021 Security Releasesentered 2021-09-21

CVE-2021-22918, CVE-2021-22921, CVE-2021-23362, CVE-2021-27290

Node.js -- August 2021 Security Releasesentered 2021-09-21

CVE-2021-22931, CVE-2021-22939, CVE-2021-22940

Node.js -- July 2021 Security Releases (2)entered 2021-09-21

CVE-2021-22930

Node.js -- April 2021 Security Releasesentered 2021-04-07

CVE-2020-7774, CVE-2021-3449, CVE-2021-3450

Node.js -- February 2021 Security Releasesentered 2021-03-09

CVE-2021-22883, CVE-2021-22884, CVE-2021-23840

Node.js -- January 2021 Security Releasesentered 2021-01-14

CVE-2020-1971, CVE-2020-8265, CVE-2020-8287

Node.js -- November 2020 Security Releasesentered 2020-11-21

CVE-2020-8277

Node.js -- September 2020 Security Releasesentered 2020-09-16

CVE-2020-8201, CVE-2020-8251, CVE-2020-8252

Node.js -- June 2020 Security Releasesentered 2020-06-12

CVE-2020-10531, CVE-2020-11080, CVE-2020-8172, CVE-2020-8174

Node.js -- multiple vulnerabilitiesentered 2020-03-09

CVE-2019-15604, CVE-2019-15605, CVE-2019-15606

Node.js -- multiple vulnerabilitiesentered 2019-08-21

CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518

Node.js -- multiple vulnerabilitiesentered 2019-03-03

CVE-2019-1559, CVE-2019-5737, CVE-2019-5739

node.js -- multiple vulnerabilitiesentered 2018-12-10

CVE-2018-0734, CVE-2018-0735, CVE-2018-12116, CVE-2018-12120, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123, CVE-2018-5407

node.js -- multiple vulnerabilitiesentered 2018-08-25

CVE-2018-0732, CVE-2018-12115, CVE-2018-7166

node.js -- multiple vulnerabilitiesentered 2018-06-15

CVE-2018-1000168, CVE-2018-7161, CVE-2018-7162, CVE-2018-7164, CVE-2018-7167

node.js -- multiple vulnerabilitiesentered 2018-03-28

CVE-2018-7158, CVE-2018-7159, CVE-2018-7160

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017entered 2017-12-14

CVE-2017-15896, CVE-2017-15897, CVE-2017-3738

Node.js -- remote DOS security vulnerabilityentered 2017-10-25

CVE-2017-14919

node -- access to unintended filesentered 2017-10-10

CVE-2017-14849

node.js -- multiple vulnerabilitiesentered 2017-07-12

no CVE referenced

node.js -- multiple vulnerabilitiesentered 2016-10-28

CVE-2016-5172

node -- multiple vulnerabilitiesentered 2016-03-14

CVE-2016-0702, CVE-2016-0705, CVE-2016-0797

node, iojs, and v8 -- denial of serviceentered 2015-07-06

CVE-2015-5380

node.js -- DoS Vulnerabilityentered 2013-10-19

no CVE referenced

node -- private information disclosureentered 2012-05-07

no CVE referenced

Multiple implementations -- DoS via hash algorithm collisionentered 2012-01-16

CVE-2011-4815, CVE-2011-4838, CVE-2011-5036, CVE-2011-5037

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (436)

2015-10-03 19:08Sunpoet Po-Chuan Hsieh (sunpoet) · 4.1.1

- Update CONFLICTS_INSTALL

37096d430c

2015-10-01 19:46Kurt Jaeger (pi) · 4.1.1

www/node: fix build on 9.3

- enforce dependency on gcc48 on 9.3

PR:		203307
Submitted by:	fcharlier@ploup.net
Approved by:	linpct@gmail.com (maintainer)

a76752b646

2015-09-23 22:15Sunpoet Po-Chuan Hsieh (sunpoet) · 4.1.1

- Update to 4.1.1 - While I'm here:   - Fix build: add more REINPLACE_CMD to post-patch: (copied from www/iojs)   - Add DOCS option   - Use CONFLICTS_INSTALL instead of CONFLICTS   - Add blank line after .include <bsd.port.pre.mk>

Changes:	https://github.com/nodejs/node/blob/master/CHANGELOG.md
PR:		203203
Submitted by:	<dcarmich@dcarmichael.net>
Approved by:	Daniel Lin <linpct@gmail.com> (maintainer)

3c729bbf83

2015-09-23 22:15Sunpoet Po-Chuan Hsieh (sunpoet) · as www/iojs

- Remove www/iojs

PR:		203203
Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)

dc87d027c3

2015-09-07 19:54Sunpoet Po-Chuan Hsieh (sunpoet) · 3.3.0 · as www/iojs

- Update to 3.3.0

Changes:	https://github.com/nodejs/node/blob/master/CHANGELOG.md
PR:		202893
Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)

19035d5036

2015-08-30 04:33Vanilla I. Shu (vanilla) · 3.2.0 · as www/iojs

Upgrade to 3.2.0.

PR:		202747
Submitted by:	maintainer

d5f37ebf70

2015-08-08 19:07Olivier Duchateau (olivierd) · 3.0.0 · as www/iojs

- Update to 3.0.0 - Remove unneeded patches

PR:		202155
Submitted by:	<linpct@gmail.com> (maintainer)

89ddac7833

2015-07-31 21:35Bartek Rutkowski (robak) · 2.5.0 · as www/iojs

www/iojs: update 2.4.0 -> 2.5.0

PR:		202001
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

ed3729deda

2015-07-27 07:58Vanilla I. Shu (vanilla) · 2.4.0 · as www/iojs

Upgrade to 2.4.0.

PR:		201911
Submitted by:	maintainer

de0a660c25

2015-07-14 23:28Philip M. Gollucci (pgollucci) · 0.12.7

www/node update 0.12.6 -> 0.12.7

PR:                  201554
Submitted by:        linpct@gmail.com (maintainer)

150eb1c9ec

2015-07-06 15:01Mark Felder (feld) · 2.3.3 · as www/iojs

Update to 2.3.3 Resolve a DoS vulnerability with unassigned CVE

Approved by:	ports-secteam (with hat)
Security:	864e6f75-2372-11e5-86ff-14dae9d210b8

92c470cba7

2015-07-06 03:14Mark Felder (feld) · 0.12.6

Update to 0.12.6 Resolve a DoS vulnerability with unassigned CVE

Changes: http://blog.nodejs.org/2015/07/03/node-v0-12-6-stable/

Approved by:	ports-secteam (with hat)

f7f42efc01

2015-06-22 20:31Dmitry Marakasov (amdmi3) · 2.3.0 · as www/iojs

- Update to 2.3.0

PR:		201033
Submitted by:	linpct@gmail.com (maintainer)

b8355694f1

2015-06-03 20:40Sunpoet Po-Chuan Hsieh (sunpoet) · 2.2.1 · as www/iojs

- Use @(owner,group,mode) syntax instead of CHMOD

Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

575f4fca97

2015-06-03 09:26Antoine Brodin (antoine) · 2.2.1 · as www/iojs

Backout r388283 and unbreak

Reported by:	pkg-fallout
Pointy hat:	sunpoet

7a69d3cb06

2015-06-01 22:35Sunpoet Po-Chuan Hsieh (sunpoet) · 2.2.1 · as www/iojs

- Use @(owner,group,mode) syntax instead of CHMOD

Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

5924b39eb7

2015-06-01 22:13Sunpoet Po-Chuan Hsieh (sunpoet) · 0.12.4

- Update to 0.12.4 - Use DISTVERSIONPREFIX instead of DISTNAME - Do not touch PREFIX/lib/node_modules and leave it for www/npm - Strip binary executable - Remove duplicate ECHO_MSG in post-install: since pkg-message presents

Changes:	https://github.com/joyent/node/blob/v0.12.4-release/ChangeLog
Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

7aa222bfff

2015-06-01 22:13Sunpoet Po-Chuan Hsieh (sunpoet) · 2.2.1 · as www/iojs

- Update to 2.2.1 - Add LICENSE - Add GH_ACCOUNT - Do not touch PREFIX/lib/node_modules and leave it for www/npm - Strip binary executable - Use pkg-message instead of ECHO_MSG in post-install:

Changes:	https://github.com/nodejs/io.js/blob/master/CHANGELOG.md
Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

c4e9328055

2015-05-30 23:25Mathieu Arnold (mat) · 2.0.1 · as www/iojs

Cleanup USE_GITHUB usage.

With hat:	portmgr
Sponsored by:	Absolight

90a49f0472

2015-05-17 21:50Bartek Rutkowski (robak) · 0.12.3

www/node: update 0.12.2 -> 0.12.3

- Remove obsolete patches

PR:		200240
Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)

35626dae91

2015-05-11 15:06Wen Heping (wen) · 2.0.1 · as www/iojs

- Update to 2.0.1

PR:		200075
Submitted by:	linpct@gmail.com(maintainer)

e76c604b31

2015-05-08 06:32Wen Heping (wen) · 2.0.0 · as www/iojs

- Update to 2.0.0

PR:		199985
Submitted by:	linpct@gmail.com(maintainer)
Thanks to:	saper@saper.info

339fa930b2

2015-04-27 16:58Sunpoet Po-Chuan Hsieh (sunpoet) · 1.8.1 · as www/iojs

- Update to 1.8.1

Changes:	https://github.com/iojs/io.js/blob/v1.x/CHANGELOG.md
PR:		199724
Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)

0ebcdcb86e

2015-04-24 14:15Johannes Jost Meixner (xmj) · 0.12.2

www/node: update to 0.12.2

- update to 0.12.2
- pet portlint (move mode setting to pkg-plist, proper conflicts)

PR:		199454
Submitted by:	Bradley T. Hughes <bradleythughes@fastmail.fm>
Approved by:	maintainer (linpct@gmail.com)

6ff9bf6256

2015-04-04 14:52Sunpoet Po-Chuan Hsieh (sunpoet) · 1.6.3 · as www/iojs

- Update to 1.6.3

Changes:	https://github.com/iojs/io.js/blob/v1.x/CHANGELOG.md
PR:		199154
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

931bfa8a0d

2015-03-31 15:05Sunpoet Po-Chuan Hsieh (sunpoet) · 1.6.2 · as www/iojs

- Update to 1.6.2 - Convert to new USE_GITHUB usage and remove deprecated GH_COMMIT

Changes:	https://github.com/iojs/io.js/blob/v1.x/CHANGELOG.md
PR:		198878
Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

5907798be2

2015-03-06 14:36Vanilla I. Shu (vanilla) · 1.4.3 · as www/iojs

Fix build on 8.4-RELEASE

PR:		198349
Submitted by:	saper@saper.info
Approved by:	maintainer

fd279d8d7c

2015-03-04 04:12Vanilla I. Shu (vanilla) · 1.4.3 · as www/iojs

Upgrade to 1.4.3.

PR:		198226
Submitted by:	maintainer

64992c1e6f

2015-03-04 03:59Vanilla I. Shu (vanilla) · 0.12.0_1

register CONFLICTS.

78b8eb3f04

2015-02-14 19:20Danilo Egea Gondolfo (danilo) · 1.2.0 · as www/iojs

- Update to 1.2.0

PR:		197606
Submitted by:	linpct@gmail.com (maintainer)

ced675cb89

2015-02-13 18:59Steve Wills (swills) · 0.12.0_1

www/node: fix error getaddrinfo EAI_BADFLAGS

PR:		197539
Reported by:	Valery Komarov <komarov@valerka.net>
Submitted by:	Daniel Lin <linpct@gmail.com> (maintainer)
Obtained from:	https://github.com/joyent/node/issues/9204

eb82f765c0

2015-02-11 06:18Vanilla I. Shu (vanilla) · 0.12.0

Upgrade to 0.12.0

PR:		197507
Submitted by:	maintainer

38a2d4ae34

2015-02-06 16:05Vanilla I. Shu (vanilla) · 1.1.0 · as www/iojs

Upgrade to 1.1.0.

Approved by:	maintainer via fb

4f24d2f541

2015-02-06 06:55Vanilla I. Shu (vanilla) · 0.10.35

add iojs as CONFLICT.

8b07cb7087

2015-02-06 06:52Vanilla I. Shu (vanilla) · 1.0.4 · as www/iojs

1: Add iojs 1.0.4, v8 JavaScript for client and server. 2: add a patch to remove MAP_NORESERVE. 3: switch to USE_GITHUB

PR:		197202
Submitted by:	Jin-Sih Lin <linpct@gmail.com> [1]

d8d5bf494b

2015-01-05 18:33Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.35

- Update to 0.10.35 - While I'm here, remove obsoleted @dirrmtry

Changes:	https://github.com/joyent/node/blob/v0.10.35-release/ChangeLog
PR:		ports/196489
Submitted by:	Christian Sturm <reezer@reezer.org>
Approved by:	Daniel Lin <linpct@gmail.com> (maintainer)

b0b2d1d291

2014-10-30 10:57Frederic Culot (culot) · 0.10.33

- Update to 0.10.33

PR:		ports/194650
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

3bfa4a782b

2014-10-18 14:20John Baldwin (jhb) · 0.10.32

The MAP_NORESERVE flag to mmap() has never been implemented in FreeBSD and is being removed.  No portrev bump needed since the kernel will continue to accept this flag for old binaries even after support for it in new binaries is removed.

PR:		193961
Approved by:	portmgr (antoine)

1ebd0e3345

2014-09-20 16:50Pawel Pekala (pawel) · 0.10.32

- Update to version 0.10.32 [1] - Move displaying of information to pkg-message, so that   package users can see it too

PR:		port/193777 [1]
Submitted by:	maintainer [1]

1d71cb3360

2014-08-23 20:30Adam Weinberger (adamw) · 0.10.31

Update to 0.10.31.

PR:		192874
Submitted by:	maintainer

2eef48cef7

2014-08-05 20:47Frederic Culot (culot) · 0.10.30

- Update to 0.10.30

PR:		ports/192368
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

b58167b290

2014-08-05 14:19Adam Weinberger (adamw) · 0.10.29

Use USES=execinfo.

3cf460919a

2014-07-11 17:43Vanilla I. Shu (vanilla) · 0.10.29

1: Upgrade to 0.10.29 [1] 2: USES=compiler to handle clang/gcc.

PR:		ports/191353
Submitted by:	amim.knabben[1], me[2]
Approved by:	maintainer

8fa5ebf209

2014-05-22 16:37Steve Wills (swills) · 0.10.28

- Update to 0.10.28

PR:		ports/189329
Submitted by:	linpct@gmail.com (maintainer)

0f4f78d960

2014-02-21 19:41Steve Wills (swills) · 0.10.26

- Update to 0.10.26

PR:		ports/186906
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

0e7f91ac8c

2014-02-05 08:36Martin Wilke (miwi) · 0.10.25

- Stage support

907de621e0

2014-01-31 17:14Steve Wills (swills) · 0.10.25

- Update to 0.10.25

PR:		ports/186150
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

ea218b5176

2014-01-13 22:00Rene Ladan (rene) · 0.10.22

Python cleanup: - USE_PYTHON* = 2.X -> USE_PYTHON* = 2 - USE_PYTHON* = 2.X+ -> USE_PYTHON* = yes Reviewed by:	python (mva, rm) Approved by:	portmgr-lurkers (mat)

50f8eaece1

2013-12-14 10:17Marcus von Appen (mva) · 0.10.22

- Use the python version specified for building instead   of one of the meta port values, which might mismatch

Reported by:	exp-run (PR 184591)
Approved by:	portmgr (blanket)

fe33ff40fb

2013-12-08 16:42Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.22

- Allow build with python3* as default python interpreter (e.g. DEFAULT_VERSIONS=python=3.3)

Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer, via IRC)

5a02a799f3

sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23
deskutils/xdg-desktop-portal 2 CVEs · 8.8 fixed 1.22.1	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21