Node.js comes with Qlik Sense and its version varies from Qlik Sense version to version.
When installing Sense node.exe will be installed side-by-side in the following location: C:\Program Files\Qlik\Sense\ServiceDispatcher\Node.
When upgrading Qlik Sense, node.exe will be replaced with whatever version is bundled with the install.
If you install node.js manually it will typically be installed in C:\Program Files\nodejs
and the Windows environment variable will point to this location by default (i.e. running node -v to get the version will result in providing the version of node found in c:\Program Files\nodejs
- Qlik Sense Enterprise all versions
Concern of whether Node.js has a potential security risk.
Qlik Sense will not register any Windows environment variable for node.js, so it will not tamper with any settings affecting already installed node.js instances. Therefore it is safe to upgrade the version of Node.js for your the Qlik Sense environment when concerned about security.