Commit

79ae780

node root certificate list trusted now-popped signing keys (including the literal number 4); anyone could forge a valid SSL cert that node would have trusted
(among other vulnerabilities, this is just the one that stood out the most to me)

commit 79ae780