soc-faker

soc-faker soc-faker is used to generate fake data for use by Security Operation Centers, Information security professionals, product teams, and many more. Getting Started soc-faker works with Python 3.6 or greater. You can install soc-faker using pip as well as cloning this repository directly. A...

youzer

youzer Fake User Generator for Active Directory Environments Introduction The goal of Youzer is to create information rich Active Directory environments. This uses the python3 library 'faker' to generate random accounts. pip3 install faker You can either supply a wordlist or have the passwords...

fake-useragent

fake-useragent Up-to-date simple useragent faker with real world database. Features Data is pre-downloaded & post-processed from Intoli LLC and the data is part of the package itself The data consists of a wide range of browser agents and various browsers Retrieves user-agent strings both of type...

CVE-2026-63325

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

EUVD-2026-81012

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325

@redocly/respect-core and @redocly/cli (Redocly CLI) before version 2.33.0 contain an arbitrary code execution vulnerability in the respect command. The root cause is dynamic evaluation of $faker runtime expressions in Arazzo descriptions: a crafted expression can traverse constructor , prototype...

ROOT-APP-NPM-CVE-2026-73231 CVE-2026-73231 in @faker-js/faker - Patched by Root

Root has patched CVE-2026-73231 in the @faker-js/faker package for Root:npm. Multiple fixed versions available...

CVE-2026-63325: Improper Control of Generation of Code

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

Arbitrary Code Execution

Faker is vulnerable to Arbitrary Code Execution. The vulnerability is due to attacker-controlled fake templates accessing the Function constructor through fakeEval.resolveProperty, which allows an attacker to execute arbitrary JavaScript code...

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: OSV:GHSA-QXC2-J82W-R537...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

CVE-2026-73231

A flaw was found in Faker, a library for generating fake data. The faker.helpers.fake method allows an attacker to control fake templates, which can then access the Function constructor. This access, specifically through fakeEval.resolveProperty when a function returns another function, enables...

SUSE CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

Linux Distros Unpatched Vulnerability : CVE-2026-73231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows...

@depup/artillery (>=2.0.33-depup.28, <=2.0.33-depup.50), @eduzz/e2e-playwright-base (0.4.0) +81 more potentially affected by CVE-2026-73231 via @faker-js/faker (>=10.0.0, <=10.4.0)

@faker-js/faker NPM version =10.0.0, =2.0.33-depup.28, =1.0.0-rc.1, =3.22.0-next.38, =9.0.0-next.68, =19.8.4, =1.0.7, =3.1.2, =0.2.9, =0.4.7, =0.2.12, =1.0.5, =0.2.10, =0.3.2, =0.3.6 and more Source cves: CVE-2026-73231 Source advisory: SNYK:JS-FAKERJSFAKER-18674671...