Node.js third-party modules: Insecure implementation of deserialization in funcster
I would like to report code injection in serialization package funcster. It allows execute arbitrary code during deserialization of JSON. Module module name: funcster version: 0.0.3 npm page: https://www.npmjs.com/package/funcster Module Description This library contains utilities for serializing...