Lucene search
+L

6 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/30 8:59 a.m.•9 views

Security Bulletin: A vulnerability affects IBM Decision Optimization for Cloud Pak for Data.

Summary A vulnerability has been addressed in IBM Decision Optimization for Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-73231 DESCRIPTION: Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in...

7.8CVSS6.4AI score0.0021EPSS
SaveExploits0Affected Software1
Veracode
Veracode
•added 2026/09/02 3:46 p.m.•23 views

Arbitrary Code Execution

Faker is vulnerable to Arbitrary Code Execution. The vulnerability is due to attacker-controlled fake templates accessing the Function constructor through fakeEval.resolveProperty, which allows an attacker to execute arbitrary JavaScript code...

7.8CVSS6.7AI score0.0021EPSS
SaveExploits0References6Affected Software1
NVD
NVD
•added 2026/08/11 8:18 p.m.•23 views

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

7.8CVSS0.0021EPSS
SaveExploits0References4
Mend
Mend
•added 2026/08/11 7:28 p.m.•15 views

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

8.5CVSS6.5AI score0.0021EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/08/11 7:28 p.m.•25 views

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

7.8CVSS6.6AI score0.0021EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•12 views

CVE-2026-73231: Improper Neutralization of Directives in Dynamically Evaluated Code

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

7.8CVSS6.6AI score0.0021EPSS
SaveExploits0References2
Rows per page
Query Builder