Node.js (< 26.12.1 / < 24.22.1 / < 22.23.4)

Eight eMudhra/emSign intermediate CA certificates were generated with weak P-384 ECC private keys, allowing attackers to forge valid TLS and code-signing certificates and perform seamless Man-in-the-Middle attacks.