fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes co…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.01704·Published 2023-10-06·Fixed in 1.2.11CWE-94