Port details

www/node 24.22.1

V8 JavaScript for client and server (meta port)

unaddressed

VuXML only

fixed

open problem reports

Port info

Maintainer: sunpoet@FreeBSD.org
Packages: latest: 24.21.0_3, update to 24.22.1 not built yet
Upstream: up to date
Last update: 2026-10-25 to 24.22.1 · ba74741313
Quarterly: 2026Q4: 24.21.0_3 · last MFH 2026-10-25 5355d058d8
Formerly: www/node7 until 2016-12-07, www/iojs until 2015-09-23
WWW: https://nodejs.org/
Links: cgit · VuXML · Report wrong data

Install

Package

# pkg install node

installs 24.21.0_3 from latest; from quarterly (2026Q4) 24.21.0_3

Port

# cd /usr/ports/www/node && make install clean

Size

1.2 KiB download · 243 B installed

Depends on

www/node24 24.21.0_3

License

Packages by version and architecture

latest

FreeBSD version	amd64	aarch64	i386
FreeBSD 16	24.21.0_3	24.21.0_3	–
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

quarterly (2026Q4)

FreeBSD version	amd64	aarch64	i386
FreeBSD 15	24.21.0_3	24.21.0_3	–
FreeBSD 14	24.21.0_3	24.21.0_3	24.21.0_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed (0)

The CVE record lists the packaged version 24.21.0_3 as affected, and no VuXML entry names the CVE. What does this mean?

None.

VuXML only (1)

Listed in VuXML, the packaged version 24.21.0_3 is still in the affected range; pkg audit reports it. What does this mean?

Node.js -- multiple vulnerabilitiesentered 2026-10-24

CVE-2026-105481, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106070, CVE-2026-106071, CVE-2026-106072, CVE-2026-106073, CVE-2026-106074, CVE-2026-111497

Fixed (30)

Show 30 fixed

VuXML entries whose affected range the packaged version has left.

NodeJS -- Vulnerabilitiesentered 2024-03-01

CVE-2023-46809, CVE-2024-21890, CVE-2024-21891, CVE-2024-21892, CVE-2024-21896, CVE-2024-22017, CVE-2024-22019, CVE-2024-22025

Node.js -- July 7th 2022 Security Releasesentered 2022-07-08

CVE-2022-2097, CVE-2022-32212, CVE-2022-32213, CVE-2022-32214, CVE-2022-32215, CVE-2022-32222

Node.js -- January 2022 Security Releasesentered 2022-02-12

CVE-2021-44531, CVE-2021-44532, CVE-2021-44533, CVE-2022-21824

Node.js -- October 2021 Security Releasesentered 2021-10-14

CVE-2021-22959, CVE-2021-22960

Node.js -- July 2021 Security Releasesentered 2021-09-21

CVE-2021-22918, CVE-2021-22921, CVE-2021-23362, CVE-2021-27290

Node.js -- August 2021 Security Releasesentered 2021-09-21

CVE-2021-22931, CVE-2021-22939, CVE-2021-22940

Node.js -- July 2021 Security Releases (2)entered 2021-09-21

CVE-2021-22930

Node.js -- April 2021 Security Releasesentered 2021-04-07

CVE-2020-7774, CVE-2021-3449, CVE-2021-3450

Node.js -- February 2021 Security Releasesentered 2021-03-09

CVE-2021-22883, CVE-2021-22884, CVE-2021-23840

Node.js -- January 2021 Security Releasesentered 2021-01-14

CVE-2020-1971, CVE-2020-8265, CVE-2020-8287

Node.js -- November 2020 Security Releasesentered 2020-11-21

CVE-2020-8277

Node.js -- September 2020 Security Releasesentered 2020-09-16

CVE-2020-8201, CVE-2020-8251, CVE-2020-8252

Node.js -- June 2020 Security Releasesentered 2020-06-12

CVE-2020-10531, CVE-2020-11080, CVE-2020-8172, CVE-2020-8174

Node.js -- multiple vulnerabilitiesentered 2020-03-09

CVE-2019-15604, CVE-2019-15605, CVE-2019-15606

Node.js -- multiple vulnerabilitiesentered 2019-08-21

CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518

Node.js -- multiple vulnerabilitiesentered 2019-03-03

CVE-2019-1559, CVE-2019-5737, CVE-2019-5739

node.js -- multiple vulnerabilitiesentered 2018-12-10

CVE-2018-0734, CVE-2018-0735, CVE-2018-12116, CVE-2018-12120, CVE-2018-12121, CVE-2018-12122, CVE-2018-12123, CVE-2018-5407

node.js -- multiple vulnerabilitiesentered 2018-08-25

CVE-2018-0732, CVE-2018-12115, CVE-2018-7166

node.js -- multiple vulnerabilitiesentered 2018-06-15

CVE-2018-1000168, CVE-2018-7161, CVE-2018-7162, CVE-2018-7164, CVE-2018-7167

node.js -- multiple vulnerabilitiesentered 2018-03-28

CVE-2018-7158, CVE-2018-7159, CVE-2018-7160

node.js -- Data Confidentiality/Integrity Vulnerability, December 2017entered 2017-12-14

CVE-2017-15896, CVE-2017-15897, CVE-2017-3738

Node.js -- remote DOS security vulnerabilityentered 2017-10-25

CVE-2017-14919

node -- access to unintended filesentered 2017-10-10

CVE-2017-14849

node.js -- multiple vulnerabilitiesentered 2017-07-12

no CVE referenced

node.js -- multiple vulnerabilitiesentered 2016-10-28

CVE-2016-5172

node -- multiple vulnerabilitiesentered 2016-03-14

CVE-2016-0702, CVE-2016-0705, CVE-2016-0797

node, iojs, and v8 -- denial of serviceentered 2015-07-06

CVE-2015-5380

node.js -- DoS Vulnerabilityentered 2013-10-19

no CVE referenced

node -- private information disclosureentered 2012-05-07

no CVE referenced

Multiple implementations -- DoS via hash algorithm collisionentered 2012-01-16

CVE-2011-4815, CVE-2011-4838, CVE-2011-5036, CVE-2011-5037

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (436)

2013-11-19 11:12Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.22

- Update to 0.10.22 - Fix PLIST: add missing manpage - While I'm here, add LICENSE

Changes:	https://github.com/joyent/node/blob/v0.10.22-release/ChangeLog
PR:		ports/184062
Submitted by:	Amim Knabben <amim.knabben@gmail.com>
Approved by:	Daniel Lin <linpct@gmail.com> (maintainer)

20ab60e039

2013-10-19 04:48Steve Wills (swills) · 0.10.21

- Update to 0.10.21 to address a security issue

PR:		ports/183092
Submitted by:	Kenji Rikitake <kenji.rikitake@acm.org>
Security:	206f9826-a06d-4927-9a85-771c37010b32

90781fea56

2013-09-30 00:51Steve Wills (swills) · 0.10.19

- Update to 0.10.19

PR:		ports/182364
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

1acff9a345

2013-09-24 19:35Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.18

- Convert to new LIB_DEPENDS format - Use USES=gmake - Support STAGEDIR

Submitted by:	sunpoet (myself)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer, via IRC)

b128ff41b1

2013-09-23 18:47Steve Wills (swills) · 0.10.18

- Update to 0.10.18

PR:		ports/181826
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

d72a6db868

2013-09-21 01:36Baptiste Daroussin (bapt) · 0.10.17

Add NO_STAGE all over the place in preparation for the staging support (cat: www)

85fbf21ec5

2013-08-23 07:02Xin LI (delphij) · 0.10.17

Update to 0.10.17.

PR:		ports/181366
PR:		ports/181479
Submitted by:	maintainer

a872224eca

2013-08-15 00:35Alex Kozlov (ak) · 0.10.15

- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)

d4041784dc

2013-07-27 15:49Steve Wills (swills) · 0.10.15

- Update to 0.10.15

PR:		ports/180883
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

f953ac7d9f

2013-07-11 22:24Steve Wills (swills) · 0.10.13

- Update to 0.10.13

PR:		ports/180423
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

3677f04048

2013-06-19 23:03Steve Wills (swills) · 0.10.12

- Update to 0.10.12

PR:		ports/179640
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

faa39e6f10

2013-05-26 15:50Sunpoet Po-Chuan Hsieh (sunpoet) · 0.10.8

- Update to 0.10.8

Changes:	https://github.com/joyent/node/blob/v0.10.8/ChangeLog
PR:		ports/178981
Submitted by:	sunpoet (myself)
Approved by:	Daniel Lin <linpct@gmail.com> (maintainer)

248fbd00ed

2013-04-24 15:43Steve Wills (swills) · 0.10.5

- Update to 0.10.5

PR:		ports/178095
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

5f1dca0a1b

2013-04-23 03:52Steve Wills (swills) · 0.10.4

- Update to 0.10.4

PR:		ports/177866
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

b3c11b48ec

2013-03-24 01:53Steve Wills (swills) · 0.10.1

- Update to 0.10.1

PR:		ports/177218
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

65fd175fad

2013-03-16 22:33Steve Wills (swills) · 0.10.0

- Update to 0.10.0

PR:		ports/176868
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

c3e94089c1

2013-03-02 21:05Steve Wills (swills) · 0.8.21

- Update to 0.8.21

PR:		ports/176466
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

a4bd3d1638

2013-02-26 17:17Dmitry Marakasov (amdmi3) · 0.8.20

- Fix build with nondefailt LOCALBASE

PR:		175809
Submitted by:	myself
Approved by:	maintainer timeout

02fd38e5e8

2013-02-18 19:47Steve Wills (swills) · 0.8.20

- Update to 0.8.20

PR:		ports/176226
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

27f99ecb19

2013-01-23 00:08Steve Wills (swills) · 0.8.18

- Update to 0.8.18

PR:		ports/pr175498
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

a4eb6292ff

2013-01-13 21:49Steve Wills (swills) · 0.8.17

- Update to 0.8.17

PR:		ports/175188
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

cbe9942638

2012-12-15 15:23Steve Wills (swills) · 0.8.16

- Update to 0.8.16

PR:		ports/174425
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

d2ad6aa192

2012-11-28 02:02Steve Wills (swills) · 0.8.15

- Update to 0.8.15

PR:		ports/173949
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

21b2a713f4

2012-10-30 23:48Steve Wills (swills) · 0.8.14

- Update to 0.8.14

PR:		ports/173095
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

53cea258d0

2012-10-13 17:28Steve Wills (swills) · 0.8.12

- Update to 0.8.12

PR:		ports/172655
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

467431a176

2012-09-29 15:46Steve Wills (swills) · 0.8.11

- Update to 0.8.11

PR:		ports/172130
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

eb5b5e90cc

2012-09-26 03:57Steve Wills (swills) · 0.8.10

- Update to 0.8.10

PR:		ports/172076
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

815221380a

2012-09-13 13:10Frederic Culot (culot) · 0.8.9

- Update to 0.8.9

PR:		ports/171562
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

bb3291db40

2012-08-23 10:36Frederic Culot (culot) · 0.8.8

- Update to 0.8.8

PR:		ports/170911
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

ea4790d5f4

2012-08-18 14:33Steve Wills (swills) · 0.8.7

- Update to 0.8.7

PR:		ports/170720
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

dd195ccb65

2012-08-14 15:05Li-Wen Hsu (lwhsu) · 0.8.6

- Update to 0.8.6 (from www/node-devel)

PR:		ports/170204
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

409ca677e3

2012-07-29 13:17Carlo Strub (cs) · 0.6.19

Fix typos in COMMENT

Approved by:	portmgr@ (implicit)

db5e2bc177

2012-06-07 09:01Frederic Culot (culot) · 0.6.19

- Update to 0.6.19

PR:		ports/168786
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

bcb911e7f4

2012-05-17 16:13Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.18

- Update to 0.6.18 - Restrict USE_PYTHON to 2.7

Changes:	https://github.com/joyent/node/blob/v0.6.18/ChangeLog
PR:		ports/167949
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

0c8c44d732

2012-05-08 10:58Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.17_1

- Make directory: PREFIX/lib/node_modules - Add a message about npm - Bump PORTREVISION for package change

Submitted by:	sunpoet (myself, via IRC)
Approved by:	Jin-Sih Lin <linpct@gmail.com> (maintainer, via IRC)

42a16baae0

2012-05-08 05:13Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.17

- Update to 0.6.17 [1] - Add OPTIONS: SHARED_V8 to build with shared lang/v8 [2] - Do not install bundled npm, users who requires npm can install www/npm [2] - Fix PLIST [2] - While I'm here, remove duplicate ONLY_FOR_ARCHS

Original submission of PR/167604 was committed by swills.

Changes:	https://github.com/joyent/node/blob/v0.6.17/ChangeLog
PR:		ports/167604 [1]
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer) [1]
		sunpoet (myself, via IRC) [2]

edece81035

2012-05-08 04:20Steve Wills (swills) · 0.6.17

- Update to 0.6.17

PR:		ports/167604
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Security:	a1d0911f-987a-11e1-a2ef-001fd0af1a4c

b2b2b7b0e3

2012-05-02 16:32Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.14

- Fix CONFLICTS

PR:		ports/167507
Submitted by:	Po-Chien Lin <linpc@cs.nctu.edu.tw>
Approved by:	Daniel Lin <linpct@gmail.com> (maintainer)

d313d559a6

2012-03-28 04:46Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.14

- Update to 0.6.14

Changes:	https://github.com/joyent/node/blob/v0.6.14/ChangeLog
PR:		ports/166405
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

fa765c20ae

2012-03-16 15:53Frederic Culot (culot) · 0.6.13

- Update to 0.6.13

PR:		ports/166177
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

7609c109bd

2012-03-05 21:04Jason Helfman (jgh) · 0.6.12

- Update to 0.6.12

PR:	ports/165645
Submitted by:	maintainer, linpct@gmail.com

9eb4fdc35d

2012-02-20 05:43Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.11

- Update to 0.6.11

Changes:	https://github.com/joyent/node/blob/v0.6.11/ChangeLog
PR:		ports/165290
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

2cffbfeee9

2012-02-07 05:12Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.10

- Update to 0.6.10

Changes:	https://github.com/joyent/node/blob/v0.6.10/ChangeLog
PR:		ports/164815
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

bd0c214f56

2012-01-24 15:08Frederic Culot (culot) · 0.6.8

- Update to 0.6.8 [1] - Use WITHOUT_FBSD10_FIX to prevent a non autotools-related configure script to   be patched and an unwanted configure.fbsd10bak file to remain after deinstall

PR:		ports/164326 [1]
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

adb90eaa28

2012-01-10 19:19Frederic Culot (culot) · 0.6.7

- Update to 0.6.7

Changes:	https://raw.github.com/joyent/node/v0.6.7/ChangeLog
PR:		ports/163990
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

cb53142d8d

2011-12-16 14:32Frederic Culot (culot) · 0.6.6

- Update to 0.6.6

Changes:	https://raw.github.com/joyent/node/v0.6.6/ChangeLog
PR:		ports/163327
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)

b2e699f612

2011-12-07 15:13Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.5

- Update to 0.6.5

Changes:	https://github.com/joyent/node/blob/master/ChangeLog
PR:		ports/163057
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

e63d4e62a8

2011-12-05 04:16Sunpoet Po-Chuan Hsieh (sunpoet) · 0.6.4

- Update to 0.6.4 - Update CONFLICTS

Changes:	https://github.com/joyent/node/blob/master/ChangeLog
PR:		ports/163016
Submitted by:	Jin-Sih Lin <linpct@gmail.com> (maintainer)
Feature safe:	yes

88856679ab

2011-09-16 08:56Vanilla I. Shu (vanilla) · 0.4.12

Upgrade to 0.4.12.

PR:		ports/160758
Submitted by:	maintainer

2b69e609c5

2011-09-08 10:44Vanilla I. Shu (vanilla) · 0.4.11

Fix broken with new lang/v8.

Approved by:	maintainer

ecaa793d7a

sysutils/consul 4 CVEs · 8.8 fixed 2.1.0	Oct 26
comms/libimobiledevice +1 related 5 unaddressed · 6.9	Oct 26
devel/libgsf 1 unaddressed · 5.3	Oct 26
www/p5-Plack 1 unaddressed · –	Oct 25
www/p5-Starman 4 unaddressed · –	Oct 25
www/p5-Web-Simple 1 unaddressed · –	Oct 24
devel/open62541 1 CVE · 9.2 fixed 1.5.8	Oct 24
dns/lua-resty-dns 1 unaddressed · 6.3	Oct 24
devel/libwasmtime 2 unaddressed · 9.9	Oct 23
devel/py-twisted 7 unaddressed · 8.7	Oct 23
www/p5-HTTP-Headers-ActionPack 1 unaddressed · –	Oct 23
print/py-pypdf 25 unaddressed · 8.7	Oct 23
www/phpbb3 1 unaddressed · 8.3	Oct 23
net-mgmt/cacti 1 unaddressed · 8.8	Oct 23
deskutils/xdg-desktop-portal 2 CVEs · 8.8 fixed 1.22.1	Oct 23

ImageMagick6	Oct 26
ImageMagick6-nox11	Oct 26
ImageMagick7	Oct 26
ImageMagick7-nox11	Oct 26
node	Oct 24
node22	Oct 24
node24	Oct 24
node26	Oct 24
traefik	Oct 24
ca_root_nss	Oct 23
gitlab-ce	Oct 23
gitlab-ee	Oct 23
mailpit	Oct 23
vifm	Oct 23
brotli	Oct 22
chromium	Oct 22
jackson-core	Oct 22
jackson-databind	Oct 22
jackson-databind	Oct 22
keycloak	Oct 22
linux-chrome	Oct 22
ungoogled-chromium	Oct 22
FreeBSD	Oct 21
p5-DBI	Oct 21
php82	Oct 21