Most recent entries from all

cnvd-2019-44968

EUVD-2026-58046

fkie_cve-2019-16772

The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.

GHSA-3fjq-93xj-3f3f — Cross-Site Scripting in serialize-to-js

Affected: npm: serialize-to-js

Versions of `serialize-to-js` prior to 3.0.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications.

## Recommendation

Upgrade to version 3.0.1 or later.

Most recent entries from all

cnvd-2019-44968

EUVD-2026-58046

fkie_cve-2019-16772

GHSA-3fjq-93xj-3f3f — Cross-Site Scripting in serialize-to-js

gsd-2019-16772