CVE-2020-7660
CVE-2020-7660
This page contains facts from public vulnerability sources. Check the original advisory before updating.
serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".
CVSS 8.1 · High · EPSS 3.0% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
serialize-javascript
- Versions
- All versions prior to version 3.1.0: Affected
No fix published
serialize-javascript npm
- Affected ranges
- SEMVER: < 3.1.0
Update to 3.1.0