CVE-2024-11831

CVE-2024-11831 · Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

CVSS 5.4 · Media · EPSS 1,1% · Corrección disponible

Publicación

2025-02-10T15:27:46.732Z

Actualización

2026-10-27T04:29:39.427Z

Pila tecnológica: system · node

Comprueba tu servidor →