@agreed/cli (0.0.6), @agreed/ui (0.0.6) +6 more potentially affected by CVE-2019-16769 via serialize-javascript (2.1.0)

serialize-javascript NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-javascript and may be impacted: - @agreed/cli 0.0.6 - @agreed/ui 0.0.6 - @commercetools-frontend/mc-html-template =15.1.4-canary.7, =15.1.4-canary.7,...

Cross-Site Scripting in serialize-javascript

Versions of serialize-javascript prior to 2.1.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 2.1.1 or later...

GHSA-H9RV-JMMF-4PGX Cross-Site Scripting in serialize-javascript

Versions of serialize-javascript prior to 2.1.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 2.1.1 or later...

The React application in the most common XSS exploits and Defense-vulnerability warning-the black bar safety net

The author has been firmly React technology stack of the user, and therefore will pay attention to the React application security related topics. The author in my ownReact+Redux+Webpack2scaffolding the third level also uses a lot of server-side rendering/isomorphism straight out of the technology...