A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.
# Note that you generally don't need to know the compiling process but knowing where everything comes from # and giving complete answers shows that you truly know what you are talking about. Generally ...