nwjs/nw.js

Upgrade Node version for security fixes

imawizrd opened this issue · 2 comments

imawizrd commented

Issue Type

Before opening an issue, please search and see if it has already been raised.

  • Bug Report

  • Feature Request

  • Successfully reproduced against the latest version of NW.js?

The nwjs.io website currently states that the latest version of nwjs v86 includes node 21.1.0.

However, NodeJS 21.7.2 was released a few days ago with security fixes (source: https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V21.md#21.7.2).

NodeJS 21.6.2, which also includes security fixes, was released on February 14, 2024.

Although chromium has been upgraded to the latest version in nwjs, it is recommended to upgrade the node version as well to ensure the latest security patches are applied.

imawizrd commented

You can disable Node support by using the manifest option described in https://nwjs.readthedocs.io/en/latest/References/Manifest%20Format/#nodejs. I am leaving this information here in case someone wants to disable Node until it is upgraded.

imawizrd commented

@ayushmanchhabra Thank you, I see the new NWJS version 88 includes node 22

  • 👍1