Skip to content
OpenAdvisories

Archive

6 December 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low 3.1

    regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js

    The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.j…