Denial of Service in serialize-to-js

概要

参考情報

• npmjs.com/advisories/790 · WEB

serialize-to-js のその他の脆弱性

• CVE-2019-16772中 6.1The serialize-to-js NPM package before version 3.0.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsa…
• CVE-2017-5954緊急 9.8An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be explo…