# Tuesday, July 15, 2025 Security Releases

DevFeed: [Tuesday, July 15, 2025 Security Releases](<https://devfeed.tech/articles/tuesday-july-15-2025-security-releases-2888.md>)

Original publisher: [Read original article](<https://nodejs.org/en/blog/vulnerability/july-2025-security-releases>)

Published: 2025-07-15T00:00:00Z

Content type: release

Language: en

Sources: [Node.js Blog](<https://devfeed.tech/sources/node-js-blog.md>)

Topics: [Node.js](<https://devfeed.tech/topics/node-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [V8](<https://devfeed.tech/topics/v8.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [cve](<https://devfeed.tech/tags/cve.md>), [node](<https://devfeed.tech/tags/node.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [release](<https://devfeed.tech/tags/release.md>), [releases](<https://devfeed.tech/tags/releases.md>), [security](<https://devfeed.tech/tags/security.md>), [security-vulnerabilities](<https://devfeed.tech/tags/security-vulnerabilities.md>), [updates](<https://devfeed.tech/tags/updates.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

The Node.js Project announced July 15, 2025 security releases for the 24.x, 22.x, and 20.x release lines. The updates address an incomplete fix for CVE-2025-23084 affecting certain Windows device names and a HashDoS vulnerability in Node.js 24.x related to V8 string hashing. The project recommends using up-to-date versions and notes that end-of-life versions remain affected when security releases occur.

## Source excerpt

Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.