215 matches found
CLEANSTART-2026-CW86244 serialize-javascript prior to 3
Security vulnerability affects the argo-workflows package. serialize-javascript prior to 3...
CLSA-2026-1793790235 TuxCare security update for serialize-javascript (2 CVEs)
TuxCare rebuilt serialize-javascript to address 2 CVEs. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1793789998 TuxCare security update for serialize-javascript (3 CVEs)
TuxCare rebuilt serialize-javascript to address 3 CVEs. Fixed in 3.0.0-tuxcare.1...
serialize-javascript: serialize-javascript: Cross-site scripting via unescaped function serialization
A flaw was found in serialize-javascript. This vulnerability allows an attacker to conduct cross-site scripting XSS attacks by supplying crafted function source text containing unescaped script closing tags. When serialized into a web page, the malicious payload can prematurely close the enclosin...
serialize-javascript: serialize-javascript: Cross-Site Scripting via improper function escaping
A flaw was found in serialize-javascript. This vulnerability allows an attacker to conduct Cross-Site Scripting XSS by supplying crafted function source text that bypasses escaping logic. When the resulting serialized data is rendered inside an HTML script block on a web page, the unneutralized...
CLSA-2026-1793293533 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 2.1.2-tuxcare.3...
CLSA-2026-1793293234 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 4.0.0-tuxcare.2...
CLSA-2026-1793293147 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 3.1.0-tuxcare.3...
CLSA-2026-1793292719 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 5.0.1-tuxcare.4...
CLSA-2026-1793291203 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 1.9.1-tuxcare.3...
CLSA-2026-1793209309 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 2.1.2-tuxcare.2...
CLSA-2026-1793207115 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 3.1.0-tuxcare.2...
CLSA-2026-1793187934 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 5.0.1-tuxcare.3...
CLSA-2026-1793183866 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 6.0.0-tuxcare.1...
CLSA-2026-1793180818 TuxCare security update for serialize-javascript (1 CVE)
TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 6.0.1-tuxcare.1...
Cross-site Scripting (XSS)
serialize-javascript is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper escaping of closing-script prefixes in attacker-influenced function source text, which allows an attacker to terminate an HTML script element and inject malicious markup into the page by controlli...
CLSA-2026-1793125688 TuxCare security update for serialize-javascript (2 CVEs)
TuxCare rebuilt serialize-javascript to address 2 CVEs. Fixed in 7.1.1-tuxcare.2...
SUSE CVE-2026-115754
serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function source text with an unescaped /script. Attackers controlling a function's source via a spoofed toString can combine...
SUSE CVE-2026-115897
Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not neutralize a bare closing-script prefix when attacker-influenced function source text ends exactly at that prefix...