# Node.js 21.7.3: end of life

This release line no longer gets security fixes.

- Recommended: 22.23.4 (lowest fixed release that is still supported)
- Known vulnerabilities: 10 (0 critical, 3 high, 3 medium, 4 low)
- End of life: yes, since 2024-06-01 (release line 21)
- Data as of: 2026-10-25 01:07 UTC

## Vulnerabilities

| ID | Severity | Actively exploited | Fixed in |
|---|---|---|---|
| [CVE-2024-36138](https://nodejs.org/en/blog/vulnerability/july-2024-security-releases) | high | no | 22.4.1 |
| [CVE-2025-23083](https://nodejs.org/en/blog/vulnerability/january-2025-security-releases) | high | no | 22.13.1 |
| [CVE-2025-23166](https://nodejs.org/en/blog/vulnerability/may-2025-security-releases) | high | no | — |
| [CVE-2024-22020](https://hackerone.com/reports/2092749) | medium | no | 22.4.1 |
| [CVE-2025-23084](https://nodejs.org/en/blog/vulnerability/january-2025-security-releases) | medium | no | 22.13.1 |
| [CVE-2025-23085](https://nodejs.org/en/blog/vulnerability/january-2025-security-releases) | medium | no | 22.13.1 |
| [CVE-2025-23165](https://nodejs.org/en/blog/vulnerability/may-2025-security-releases) | low | no | — |
| [CVE-2024-37372](https://www.cve.org/CVERecord?id=CVE-2024-37372) | low | no | 22.4.1 |
| [CVE-2024-36137](https://nodejs.org/en/blog/vulnerability/july-2024-security-releases) | low | no | 22.4.1 |
| [CVE-2024-22018](https://hackerone.com/reports/2145862) | low | no | 22.4.1 |

Installed with apt, yum or another package manager? Your distribution may already have patched this without changing the version, so check its security tracker too.

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/nodejs/21.7.3 · JSON: https://fixedin.dev/nodejs/21.7.3.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt