Vendor
The Faker.js library contains an arbitrary code execution vulnerability in the helpers.fake method, allowing attackers to access the global constructor and execute unauthorized JavaScript.