Issues

• Follow-up data on CVE-2026-106071 (Permission Model wildcard over-grant): reproduction requires a single-grant tree

  nodejs/node#66943 · Filter by author NENWA618 opened on Oct 23, 2026

• Node.js QUIC Team Meeting 2026-10-29

  nodejs/node#66941 · Filter by author openjs-meetings-bot opened on Oct 23, 2026

• vm: SourceTextModule link() relinks finished dependencies, linker calls grow quadratically since v22.1.0

  nodejs/node#66938 · Filter by author akamick86 opened on Oct 22, 2026

• fs: createReadStream disregards setDefaultHighWaterMark

  nodejs/node#66937 · Filter by author mertcanaltin opened on Oct 22, 2026

• fs: copyFile spins at 100% CPU if source is truncated during copying on macOS

  nodejs/node#66934 · Filter by author nanzhi84 opened on Oct 22, 2026

• macOS: a child created with fork() by a process that loaded libnode aborts in exit() (~SigintWatchdogHelper → uv_sem_destroy)

  nodejs/node#66933 · Filter by author davidnich opened on Oct 22, 2026
  1

• build: v24.22.1 fails with --shared-openssl on OpenSSL 3.0.x: EVP_PKEY_PRIVATE_KEY not declared (deps/ncrypto)

  nodejs/node#66926 · Filter by author dragos-cojocari opened on Oct 22, 2026
  1

• ffi: nextTick and microtasks queued in event-loop-invoked callbacks are not drained

  ffi
  nodejs/node#66917 · Filter by author trivikr opened on Oct 22, 2026
  

• JSON.parse returns the wrong object key after an earlier sibling object with a "\\" key (v24.14.1)

  nodejs/node#66916 · Filter by author dj-ccs opened on Oct 22, 2026
  4

• webstreams: transform() loses AsyncLocalStorage context after a parked write (regression in v24.22.0)

  nodejs/node#66906 · Filter by author Timer opened on Oct 21, 2026

• permission: process.permission.drop() aborts (SIGABRT) when two --allow-fs-read grants collide at their first wildcard

  nodejs/node#66901 · Filter by author itxcrusher opened on Oct 21, 2026
  2

• build: Temporal cross builds do not separate host and target Rust archives

  buildv8 engine
  nodejs/node#66897 · Filter by author inoway46 opened on Oct 21, 2026

• 03923858417d ("src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH") breaks build with shared, latest stable brotli

  nodejs/node#66894 · Filter by author ziyao233 opened on Oct 21, 2026
  4

• fs.mkdir(path, { recursive: true }) never returns when an intermediate mkdir fails with ENOENT although its parent exists (e.g. under /proc)

  nodejs/node#66890 · Filter by author genlorem opened on Oct 21, 2026

• http2: a destroyed Http2Session keeps its idle timer armed, so every closed session stays in memory until the server timeout fires

  nodejs/node#66885 · Filter by author ccamensuli opened on Oct 20, 2026

• child_process: default env ignores a reassigned process.env since v26.11.0

  nodejs/node#66882 · Filter by author everett1992 opened on Oct 20, 2026

• doc: crypto.randomBytes, randomInt, randomUUID and getRandomValues continue from the saved state after a snapshot or checkpoint restore

  nodejs/node#66880 · Filter by author KurathSec opened on Oct 20, 2026

• Abort "Lazy deopt after a fast API call with return value is unsupported" in Buffer.byteLength called from maybePrepareFinalChunk / res.end(string)

  nodejs/node#66870 · Filter by author jakesalvesen opened on Oct 20, 2026
  6

• fs.cpSync with preserveTimestamps can give the copy an mtime in a different millisecond than the source

  nodejs/node#66861 · Filter by author d3lm opened on Oct 19, 2026

• test_runner: merging coverage across test processes drops never-run blocks, so coverage gates pass

  nodejs/node#66860 · Filter by author steida opened on Oct 19, 2026

• Node-API addons with normal finalizers keep GBs of dead external memory on V8 >= 14.8 (v8-canary)

  nodejs/node#66859 · Filter by author edusperoni opened on Oct 19, 2026

• http: NO_PROXY does not match 'localhost.', '[::1]' or IPv4-mapped loopback

  nodejs/node#66853 · Filter by author Figo5 opened on Oct 19, 2026

• Temporal objects before 1582-10-15 are formatted in the Julian calendar (fixed in V8 14.8 by 3102739e)

  nodejs/node#66847 · Filter by author gesposito opened on Oct 19, 2026

• Intermittent crash on out/doc/llms.txt target on RISC-V

  riscv64
  nodejs/node#66845 · Filter by author sxa opened on Oct 19, 2026
  1

• ffi: GC of DynamicLibrary frees registered callbacks still held by native code

  ffi
  nodejs/node#66841 · Filter by author trivikr opened on Oct 19, 2026
  2