Unrelated, the Nodejs patch is to strip the emudhra certs, which is its own separate security incident.