Security· ★★★· bearish·

Node.js ships HIGH-severity patches as crypto platform backends remain exposed

  • —Node.js patched HIGH-severity flaws in 26.x, 24.x and 22.x
  • —Node.js and Bun still lack a fix for compromised eMudhra keys
  • —Mozilla, Chrome, Apple and Microsoft blocked eMudhra certs on Oct 17-20
  • —Polygon Labs CTO: issue is not crypto-specific, risk is MITM attacks
Why it matters: Exchange backends and trading bots running Node.js stay exposed to traffic interception until patches land.
Source: Cryptoast