Serialize To Js
Approved changes feed: RSS · Atom
cpe:2.3:a:commenthol:serialize-to-js:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Commenthol (8ba61e44-7b4f-5341-ba21-9a95f413c500) |
|---|---|
| Product | Serialize To Js (86abdbf2-2a9b-5d23-9eed-f57f70dfee14) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-16772 |
vulnerable | 2026-06-08 05:13:09.363629 |
regular expressions Cross-Site Scripting (XSS) vulnerability in serialize-to-js
LOW (3.1)
The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.
Published: 2019-12-06T23:25:14.000Z
Updated: 2024-08-05T01:24:48.633Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.