CVE-2026-1245

The binary-parser library for Node.js is vulnerable to a code injection flaw in versions prior to 2.3.0 . The root cause is the library's use of the Function constructor to dynamically generate JavaScript code at runtime, where it directly interpolates parser field names and encoding parameters w...