We are still assessing the impact and will share any additional advisories as we learn more.
Action required for server-side Node users
If you run Node on your server, please upgrade to the latest Node base image, version 2.23.4 or higher. This release removes the affected certificates.
Some of the libraries we depend on also bundle their own CA certificates. We are waiting on patches from those libraries, and once they are available we will release a new version. Please upgrade to it when it ships.