npm/serialize-javascript

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Modified: 9/10/2026

Cross-site Scripting (XSS) in serialize-javascript

Modified: 10/15/2026

Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

Modified: 9/30/2026

Cross-Site Scripting in serialize-javascript

Modified: 9/10/2026

Insecure serialization leading to RCE in serialize-javascript

Modified: 11/8/2023

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Modified: 9/10/2026