Security News CERT/CC Warns binary-parser Bug Allows Node.js Privilege-Level Code Execution TheHackerNews Daniel Bender 21 Jan 2026 A flaw in the binary-parser npm package before version 2.3.0 lets attackers execute arbitrary JavaScript via unsanitized parser input.