Binary Parser

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:keichi:binary-parser:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorKeichi (6808c6b3-22f3-5500-8113-2d2a4d5b2089)
ProductBinary Parser (9763d248-80eb-51f7-b05e-77c3b04e471e)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/keichi/binary-parser purl2cpe 2026-06-01 10:17:46.502447
pkg:npm/binary-parser purl2cpe 2026-06-01 10:17:46.502449

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1245 vulnerable 2026-06-08 07:49:07.977945 CVE-2026-1245
A code injection vulnerability in the binary-parser library prior to version 2.3.0 allows arbitrary JavaScript code execution when untrusted values are used in parser field names or encoding parameters. The library directly interpolates these values into dynamically generated code without sanitization, enabling attackers to execute arbitrary code in the context of the Node.js process.
Published: 2026-01-20T18:50:34.232Z
Updated: 2026-01-21T17:10:56.426Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.