Skip to content
OpenAdvisories

Product · yahoo

serialize-javascript

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-115897

    Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

    Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function sour…

    yahoo serialize-javascript
  • Low 2.3
    CVE-2026-97711

    Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

    Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closing tags in attacker…

    yahoo serialize-javascript serialize-javascript node-serialize-javascript Debian Ubuntu npm