@faker-js/faker vulnerabilities

CVEs whose affected-version data names the @faker-js/faker package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73231High· 7.8

1mo ago

Faker generates massive amounts of fake data in the browser and Node.js

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through f…

▾ Twilightfaker-js · @faker-js/fakerEPSS 0.22%via NVD