faker vulnerabilities

1 known vulnerability in faker from Faker-js. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  faker: Improper Neutralization of Directives in Dynamically Evaluated Code

  CVE-2026-73231Aug 11, 2026Faker-js

  Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty