Description
Faker.js helps users create large amounts of data for testing and development. The maintainer deliberately removed the functional code from this package. This appears to be a purposeful and successful attempt to make the package unusable. This is related to the colors.js CVE-2021-23567.
Recommendation
No fix is available yet. Followings are affected versions:
- = 6.6.6
References
Could your website be exposed too?
SmartScanner can check your website for Removal of functional code in faker.js and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Valine code injection vulnerability - CVE-2022-38545
- Remote code execution in Handlebars.js - Vulnerability
- Sandbox Bypass Leading to Arbitrary Code Execution in constantinople - Vulnerability
- HTML comments vulnerability allowing to execute JavaScript code - CVE-2021-41165
You might also like:
See something that needs correcting? Let us knowUpdated January 11, 2023