Threats tagged 'bit-node-2026-106074'

A flaw in Node.js crypto affects the internal entropy caches used by crypto.randomUUID(), crypto.randomUUIDv7(), and crypto.randomInt() when user-land startup snapshots or single executable applications are built. If these functions are called during snapshot creation, processes started from that snapshot return identical UUIDs and random integers until the cache is refilled, causing collisions and predictability across processes. This impacts Node.js versions 22.x, 24.x, and 26.x prior to specific fixed releases.