CVE-2023-45311

Name of the Vulnerable Software and Affected Versions fsevents versions prior to 1.2.11

Description The issue arises from fsevents depending on a specific URL, https://fsevents-binaries.s3-us-west-2.amazonaws.com, which could potentially allow an adversary to execute arbitrary code if a JavaScript project that depends on fsevents distributes code obtained from this URL when it was under an adversary's control.

Recommendations For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue. As a temporary workaround, consider avoiding the use of code obtained from the specified URL until the update is applied.