- Patched CVE-2025-27209: mitigated HashDoS in V8 by reverting recent rapidhash changes.
- Patched CVE-2025-27210: fixed Windows reserved device names (CON, PRN, AUX) bypass in path.normalize().
- Updated V8 dependency and added handling for all Windows reserved driver names.