From Node 20 EOL to Node 27 LTS and Everything in Between

Node.js 20 just reached End-of-Life on April 30, 2026. The big story after a major EOL is what comes next for the project. With changes to the release cadence, all versions becoming LTS, and handling an increased number of discovered vulnerabilities, Node.js is entering a pivotal new phase. Let’s talk about it!
‍
Join HeroDevs and members of the Node.js Technical Steering Committee, Matteo Collina and Marco Ippolito, for an inside look at how decisions are made and how key initiatives move from discussion to release. We will walk through the Node.js vulnerability lifecycle, from report intake and triage to coordinated disclosure, and examine the growing impact of more frequent CVEs.
‍
And we'll dig into the trend every maintainer is feeling, CVEs arriving more frequently, AI-generated reports flooding intake queues, and the widening gap between "AI slop" and a real vulnerability. We'll also look at the constructive side, where AI is genuinely helping find missing checks and faster exploits, and how the project uses AI agents for triage, automation, and threat modeling.
‍
Finally, learn how HeroDevs supports the ecosystem through the OpenJS Foundation ESP and what Never-Ending Support means for organizations that cannot migrate off Node.js 20 right away. Expect candid insights, practical takeaways, and Q&A.