CVE-2026-73231: Faker: helpers.fake exploitable into arbritary code execution

September 2, 2026

faker.helpers.fake can be tricked into arbritary code execution.

References

github.com/advisories/GHSA-qxc2-j82w-r537
github.com/faker-js/faker/commit/54586208f904012f57c50b46cc1ad32bcbe4bfb7
github.com/faker-js/faker/pull/3852
github.com/faker-js/faker/releases/tag/v10.5.0
github.com/faker-js/faker/security/advisories/GHSA-qxc2-j82w-r537
nvd.nist.gov/vuln/detail/CVE-2026-73231

Code Behaviors & Features

Detect and mitigate CVE-2026-73231 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →