TI-2017-03871 CVE-2017-5954 · GHSA-mm62-wxc8-cf7m
An issue was discovered in the serialize-to-js package 0.5.0 for Node.js.
Priority MEDIUM 49
An issue was discovered in the serialize-to-js package 0.5.0 for Node.js.
Serialize-to-js Project
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Serialize-to-js Project records in CISA KEVNo Serialize-to-js Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Serialize-to-js · all components
TI-2017-11618 CVE-2017-15871 · GHSA-57v2-hvjj-f26g
The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a…
Priority LOW 35
The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression "function()" substring, as demonstrated by a "funct…
TI-2019-12553 CVE-2019-16772 · GHSA-3fjq-93xj-3f3f
regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js
Priority LOW 28
The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS).