Mozilla, Google, and Apple have blocked compromised certificates from CA eMudhra after researchers discovered private keys were trivially guessable. Node.js has released emergency patches for versions 22.x, 24.x, and 26.x to address these risks.