653 matches found
Cross-Site Scripting in serialize-to-js
Versions of serialize-to-js prior to 3.0.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 3.0.1 or later...
GHSA-3FJQ-93XJ-3F3F Cross-Site Scripting in serialize-to-js
Versions of serialize-to-js prior to 3.0.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 3.0.1 or later...
Cross-Site Scripting (XSS)
serialize-javascript is vulnerable to cross-site scripting XSS. Unsafe characters are not properly validated and sanitized in serialized regular expressions, allowing an attacker to inject and execute arbitrary Javascript into a victim's browser. This vulnerability is not affected on Node.js...
CVE-2019-16772: Improper Neutralization of Input During Web Page Generation
The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
PT-2019-14828
Name of the Vulnerable Software and Affected Versions serialize-to-js versions prior to 3.0.1 Description The issue arises from the improper handling of unsafe characters in serialized regular expressions, leading to Cross-site Scripting XSS. This problem does not affect Node.js applications due ...
CVE-2019-16769
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
CVE-2019-16769
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
Cross site scripting
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
CVE-2019-16769 Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
1.1.0 (1.0.0), 1c (>=6.2.0, <=8.17.2) +11724 more potentially affected by CVE-2019-16769 via serialize-javascript (>=1.0.0, <=2.1.0)
serialize-javascript NPM version =1.0.0, =6.2.0, =0.1.0, =0.0.1, =2.0.0, =0.1.0, =0.24.0, =0.1.4, =0.1.0, =1.0.0-beta.1, =1.0.4, =0.1.1, =0.1.99 and more Source cves: CVE-2019-16769 Source advisory: MEND:CVE-2019-16769...
CVE-2019-16769
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
CVE-2019-16769
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
CVE-2019-16769
The CVE-2019-16769 issue affects the npm package serialize-javascript prior to version 2.1.1, which is vulnerable to Cross-site Scripting (XSS) due to unsafe characters in serialized regular expressions. Node.js environments are not affected because RegExp.prototype.toString() escapes forward sla...
@agreed/cli (0.0.6), @agreed/ui (0.0.6) +6 more potentially affected by CVE-2019-16769 via serialize-javascript (2.1.0)
serialize-javascript NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-javascript and may be impacted: - @agreed/cli 0.0.6 - @agreed/ui 0.0.6 - @commercetools-frontend/mc-html-template =15.1.4-canary.7, =15.1.4-canary.7,...
GHSA-H9RV-JMMF-4PGX Cross-Site Scripting in serialize-javascript
Versions of serialize-javascript prior to 2.1.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 2.1.1 or later...
Cross-Site Scripting in serialize-javascript
Versions of serialize-javascript prior to 2.1.1 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize serialized regular expressions. This vulnerability does not affect Node.js applications. Recommendation Upgrade to version 2.1.1 or later...
@agreed/cli (0.0.6), @agreed/ui (0.0.6) +6 more potentially affected by CVE-2019-16769 via serialize-javascript (2.1.0)
serialize-javascript NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-javascript and may be impacted: - @agreed/cli 0.0.6 - @agreed/ui 0.0.6 - @commercetools-frontend/mc-html-template =15.1.4-canary.7, =15.1.4-canary.7,...
CVE-2019-16769: Improper Neutralization of Input During Web Page Generation
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting XSS. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of...
PT-2019-14825
Name of the Vulnerable Software and Affected Versions serialize-javascript versions prior to 2.1.1 Description The issue concerns a failure to properly mitigate against unsafe characters in serialized regular expressions, leading to Cross-site Scripting XSS. This problem does not affect Node.js...