Serialize-To-Js Project Serialize-To-Js
3 CVEs affecting Serialize-To-Js Project Serialize-To-Js. Latest disclosed: 2019-12-07. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5954 | Critical | 9.8 | 2017-02-10 | An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arb… |
CVE-2017-15871 | High | 7.5 | 2017-10-24 | The deserialize function in serialize-to-js through 1.1.1 allows attackers to cause a denial of service via vectors involving an Immediately Invoked Function E… |
CVE-2019-16772 | Low | 3.1 | 2019-12-07 | The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in se… |