According to this post on the official V8 Javascript blog, the pseudo-random number generator (PRNG) that V8 Javascript uses in Math.random() is horribly flawed and getting replaced with something ...

"We have now determined that applications which use the Java Cryptography Architecture (JCA) for key generation, signing, or random number generation ... and java.net classes aren't vulnerable.