https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:41:44.108134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-44968 cnvd-2019-44968 2026-10-03T17:41:44.111283+00:00 cnvd-2019-44968 https://cve.radiocsirt.org/vuln/euvd-2026-58046 EUVD-2026-58046 2026-10-03T17:41:44.111316+00:00 EUVD-2026-58046 https://cve.radiocsirt.org/vuln/fkie_cve-2019-16772 fkie_cve-2019-16772 2026-10-03T17:41:44.111329+00:00

The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-3fjq-93xj-3f3f GHSA-3fjq-93xj-3f3f — Cross-Site Scripting in serialize-to-js 2026-10-03T17:41:44.111359+00:00

Affected: npm: serialize-to-js

Versions of `serialize-to-js` prior to 3.0.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications.

## Recommendation

Upgrade to version 3.0.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2019-16772 gsd-2019-16772 2026-10-03T17:41:44.111384+00:00 gsd-2019-16772