Vendor/product archive

verizon / serialize-javascript CVEs

Beta · best-effort

2 CVEs tagged to verizon / serialize-javascript — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to verizon vendor archive

CVE-2020-7660

Published Jun 1, 2020

serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2019-16769

Published Dec 5, 2019

The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regula…

CVSS 4.2 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1