An incomplete fix was found for CVE-2025-23084 in Node.js affecting the Windows-specific device names such as CON, PRN, and AUX when using the path.join API. This vulnerability impacts Windows users of Node.js versions prior to the fixed releases. The issue is addressed in Node.js versions 20.19.4, 22.17.1, and 24.4.1.