Is a JavaScript runtime built on Chrome`s V8 JavaScript engine

Node.js 15.10.0 (32-bit)

February, 24th 2021 - 26.12 MB - Open Source

Free Download

Security Status

Latest Version

Node.js 21.7.3 (32-bit)
Operating System

Windows XP / Vista / Windows 7 / Windows 8 / Windows 10
User Rating

Click to vote
Author / Product

Node.js Foundation / External Link
Filename

node-v15.10.0-x86.msi
MD5 Checksum

b5902ca51ab1ab983720b81ed0f55c95

Sometimes latest versions of the software can cause issues when installed on older devices or devices running an older version of the operating system. Software makers usually fix these issues but it can take them some time. What you can do in the meantime is to download and install an older version of Node.js 15.10.0 (32-bit).

For those interested in downloading the most recent release of Node.js (32-bit) or reading our review, simply click here.

All old versions distributed on our website are completely virus-free and available for download at no cost.

We would love to hear from you

If you have any questions or ideas that you want to share with us - head over to our Contact page and let us know. We value your feedback!

Download Node.js 15.10.0 (32-bit)

Node.js 15.10.0 (32-bit) Screenshots

The images below have been resized. Click on them to view the screenshots in full size.

What's new in this version:

Fixed:
- CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service by resource exhaustion
Affected Node.js versions are vulnerable to denial of service attacks when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory.
- CVE-2021-22884: DNS rebinding in --inspect
Affected Node.js versions are vulnerable to denial of service attacks when the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160.
- CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
This is a vulnerability in OpenSSL which may be exploited through Node.js