CVE-2026-1245: Code Injection Flaw Hits Node.js binary-parser

The Node.js library "binary-parser" has a critical code-generation flaw (CVE-2026-1245) where unsanitized parser field names and encoding parameters are injected into dynamically generated JavaScript via the Function constructor, enabling arbitrary code execution in applications that build parsers from untrusted input; maintainers have released version 2.3.0 with input validation and mitigations and users are advised to upgrade and avoid using untrusted values in parser definitions.