Skip to main content

Node.js 22 High-Severity Vulnerability Fixes

A series of high-severity vulnerabilities have been identified and patched in Node.js version 22. For detailed technical information about the vulnerabilities, see the Node.js Security Release Advisory.

Entrinsik has taken immediate action to update all Informer Cloud deployments to Node 22.23.4.

Customers who host their own Informer are advised to take the following actions to upgrade their underlying Node installations. While there are no known cases of active exploitation of Node version 22 at this time, the underlying bugs are present and so users are strongly encouraged to take this precautionary measure.

If you have any questions, reach out to Informer Support at i5support@entrinsik.com.

Windows Remediation Steps​

Administrators can resolve this vulnerability in two ways:

  1. Upgrade to the latest version of Informer 5 — The easiest option. The latest Informer 5 release includes Node 22.23.4 and will resolve the vulnerability automatically. See Upgrading Informer for instructions.
  2. Apply manual Node.js updates — If you prefer to stay on your current Informer version, follow the remediation steps for your deployment type and version below.

For Informer 5 versions 2026.1.0 or higher​

  1. Stop the Informer service
    • Open Services (press Win + R, type services.msc, and press Enter)
    • Locate the Informer service in the list (by default, called "Informer 5 Server")
    • Right-click and select Stop
    • Wait for the service status to change to "Stopped"
  2. Download the latest Node.js
    • Open your web browser and download Node.js 22.23.4: node-v22.23.4-win-x64.zip
    • Save the ZIP file to a temporary location (e.g., Downloads folder)
  3. Extract and replace the Node installation
    • Extract the downloaded ZIP file to reveal its contents
    • In File Explorer, navigate to your Informer installation's Node runtime directory (C:\Entrinsik\Informer5 Server\runtime)
    • Delete the node directory
    • Extract the contents of the downloaded ZIP into this runtime directory
    • Rename the resulting folder to node. The directory structure should be .\runtime\node, with the contents of the Node distribution (including the node.exe file) contained in that node folder.
  4. Start the Informer service
    • Open Services again (press Win + R, type services.msc, and press Enter)
    • Locate the Informer service
    • Right-click and select Start
    • Wait for the service status to change to "Running"
  5. Verify the upgrade
    • Open your browser and navigate to your Informer instance
    • Log in and confirm that the application is functioning normally

For Informer 5 version 2025.2.x​

  1. Stop the Informer service
    • Open Services (press Win + R, type services.msc, and press Enter)
    • Locate the Informer service in the list (by default, called "Entrinsik Informer 5")
    • Right-click and select Stop
    • Wait for the service status to change to "Stopped"
  2. Download and run the Node.js MSI installer
    • Download the Node.js 22.23.4 MSI installer: node-v22.23.4-x64.msi
    • Once downloaded, double-click the .msi file to launch the installer
    • Follow the installer prompts and complete the installation
    • The installer will automatically replace the existing Node.js installation
  3. Start the Informer service
    • Open Services again (press Win + R, type services.msc, and press Enter)
    • Locate the Informer service
    • Right-click and select Start
    • Wait for the service status to change to "Running"
  4. Verify the upgrade
    • Open your browser and navigate to your Informer instance
    • Log in and confirm that the application is functioning normally

For Informer 5 versions 2025.1.x or earlier​

These versions of Informer 5 use Node 14, which has reached its End of Life, and should be upgraded as soon as possible to the latest version of Informer 5. Please refer to our Upgrading Informer article for instructions.

Docker Remediation Steps​

For on-premises Linux deployments using Docker, follow the steps in the Linux Docker upgrade guide to download the latest Informer images and recreate your containers with the updated Node.js installation.