TI-2019-12553 CVE-2019-16772 · GHSA-3fjq-93xj-3f3f
regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js
Priority LOW 28
The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS).
Vulnerabilities
3 records
TI-2017-11618 CVE-2017-15871 · GHSA-57v2-hvjj-f26g
The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a…
Priority LOW 35
The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function Expression "function()" substring, as demonstrated by a "funct…
TI-2017-03871 CVE-2017-5954 · GHSA-mm62-wxc8-cf7m
An issue was discovered in the serialize-to-js package 0.5.0 for Node.js.
Priority MEDIUM 49
An issue was discovered in the serialize-to-js package 0.5.0 for Node.js.