View all vulnerabilities

CVE-2019-16769

Cross-Site Scripting in serialize-javascript

Versions of `serialize-javascript` prior to 2.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications.## RecommendationUpgrade to version 2.1.1 or later.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
4.1
Score Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected Versions
serialize-javascript < 2.1.1
Severity
Medium
Ecosystem
JavaScript
Publish Date
December 5, 2019
Modified Date
November 7, 2023