Install with winget
$ winget install --id OpenJS.NodeJS.21 --exact --version 21.7.3Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.
Silent install command for Node.js 21
Node.js 21 uses MSI (WiX). The silent install switches are /quiet /norestart.
msiexec.exe /i node-v21.7.3-x64.msi /quiet /norestart
For Intune admins
Stop chasing app updates. Pckgr patches them for you.
Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.
Start free 30-day trialNo credit card required.
About
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
Installers · v21.7.3
| Architecture | Type | Scope | Install | Download |
|---|---|---|---|---|
| x86 | MSI WiX | machine | Direct | |
| x64 | MSI WiX | machine | Direct | |
| arm64 | MSI WiX | machine | Direct |
Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.
Security
25 known CVEs via NVD
A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.
A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality impact or bypass of the intended security...
See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.
Related apps
More from Node.js Foundation or browse coding, cross-platform, develop.
Frequently asked questions
How do I install Node.js 21 on Windows?
How do I install Node.js 21 silently for unattended deployment?
What are the silent install switches for Node.js 21?
How do I uninstall Node.js 21 via winget?
Is Node.js 21 free?
Does Node.js 21 work on Windows 10?
How do I keep Node.js 21 up to date?
Recent versions
- 21.7.3latest
- 21.7.2
- 21.7.1
- 21.7.0
- 21.6.2
- 21.6.1
- 21.6.0
- 21.4.0
- 21.3.0
- 21.2.0