Skip to content
OpenAdvisories

Product · yahoo

serialize-javascript

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-115754

    serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

    serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function source text with an unescaped </script. Attackers controlling a function's sour…

    yahoo serialize-javascript serialize-javascript node-serialize-javascript Debian Ubuntu npm
  • Medium 5.9
    CVE-2026-34043

    Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

    Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object …

    yahoo serialize-javascript serialize-javascript node-serialize-javascript Debian Ubuntu npm
  • Medium 4.2
    CVE-2019-16769

    Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)

    The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since N…

    yahoo serialize-javascript serialize-javascript npm