Versions of syntax-error prior to 1.1.1 are affected by a cross-site scripting vulnerability which may allow a malicious file to execute code when browserified.
// recommendationUpdate to version 1.1.1 or later.
npm package report
Is syntax-error safe?
1 known vulnerability, worst severity HIGH.
// reach
0 direct dependencies
none carry a known advisory
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so npm packages are not covered.
cvss
0.0
high
severity band, no base score published
epss
0.00%
high
chance of exploitation in 30 days, 96th percentile of all CVEs
xyz score
0.0
medium
CyberXYZ composite, a working exploit is published
fig. 01 — GHSA-5726-g6r9-5f22, the advisory selected below
// 1 advisories
Checked 2026-10-04 at 01:07 UTC. The most recent advisory here was published 2017-10-24. Updated continuously from NVD, GHSA, OSV and CNA feeds.