PT-2026-120762

The quiet one in the Node.js batch is CVE-2026-106074. If you ship a single executable app or use a startup snapshot, the random caches behind crypto.randomUUID and randomInt got baked into the build, so every process hands out the same values. Upgrading Node on the server doesn't undo that...