# Node.js update to 22.23.4 (eMudhra Intermediate CA Compromise)

**URL:** <https://meta.discourse.org/t/node-js-update-to-22-23-4-emudhra-intermediate-ca-compromise/415479>\
**Category:** Product Support\
**Created:** [October 22, 2026, 3:17pm UTC](https://meta.discourse.org/t/node-js-update-to-22-23-4-emudhra-intermediate-ca-compromise/415479 "2026-10-22T15:17:40Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\
**Post date:** [October 22, 2026, 3:43pm UTC](https://meta.discourse.org/t/node-js-update-to-22-23-4-emudhra-intermediate-ca-compromise/415479/2 "2026-10-22T15:43:31Z")

</div>

We have [already updated](https://github.com/discourse/discourse_docker/commit/1dceff8e22195fffa4a3c24682aab044acb2f8f0) OS-level trusted CAs and relevant Ruby dependencies. We’re working on applying that node upgrade as well, and will update here when it’s done.

It’s worth noting: Discourse does not use `node` at runtime, so this is less important than the ruby & system-level upgrades.

(for those who aren’t aware, these CA upgrades are for [Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds](https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/))

---

_[View the full topic](https://meta.discourse.org/t/node-js-update-to-22-23-4-emudhra-intermediate-ca-compromise/415479)._