Lucene search

K
nodejsRyuichi OkumuraNODEJS:1426
HistoryDec 09, 2019 - 3:26 p.m.

Cross-Site Scripting

2019-12-0915:26:05
Ryuichi Okumura
www.npmjs.com
16

EPSS

0.001

Percentile

22.7%

Overview

Versions of serialize-javascript prior to 2.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications.

Recommendation

Upgrade to version 2.1.1 or later.

References