Serialize-javascript (Yahoo) - vulnerabilities (CVEs)

4 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-23. Vendor: Yahoo.

CVEs of Serialize-javascript

• CVE-2026-115897 - CVSS 2.1 (low), 2026-10-23: Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source…
• CVE-2026-97711 - CVSS 2.3 (low), 2026-09-29: Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function…
• CVE-2026-34043 - CVSS 7.5 (high), 2026-03-31: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS)…
• CVE-2019-16769 - CVSS 5.4 (medium), 2019-12-05: The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters…