Skip to content
OpenAdvisories

Package · Ubuntu

node-serialize-javascript

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.3

    Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

    Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closing tags in attacker…