Skip to content
OpenAdvisories

Vendor

commenthol

3 known vulnerabilities.

Products

md-fileserver 1 serialize-to-js 1 versionn 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2019-16772

    regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js

    The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.j…

    commenthol serialize-to-js serialize-to-js npm