Description
faker.helpers.fake can be tricked into arbritary code execution.
Recommendation
Update the @faker-js/faker package to the latest compatible version. Followings are version details:
- Affected version(s): <= 10.4.0
- Patched version(s): 10.5.0
References
Could your website be exposed too?
SmartScanner can check your website for Faker: helpers.fake exploitable into arbritary code execution and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader - CVE-2026-53597
- expr-eval vulnerable to Code Execution - CVE-2026-12866
- Arbitrary code execution in protobufjs - CVE-2026-41242
- Angular Expressions - Remote Code Execution using filters - CVE-2026-44643
You might also like:
See something that needs correcting? Let us knowUpdated September 02, 2026


