CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution

Certains articles de veille peuvent faire l'objet de traduction automatique.

A security vulnerability has been disclosed in the popular binary-parser npm library that, if successfully exploited, could result in the execution of arbitrary JavaScript.
The vulnerability, tracked as CVE-2026-1245 (CVSS score: N/A), affects all versions of the module prior to version 2.3.0, which addresses the issue. Patches for the flaw were released on November 26, 2025.
Binary-parser is a

Source : https://thehackernews.com/2026/01/certcc-warns-binary-parser-bug-allows.html