Control: tags -1 + confirmed

On Wed, 2025-04-09 at 13:59 +0200, Yadd wrote:
> A flaw was found in npm-serialize-javascript. The vulnerability
> occurs because the serialize-javascript module does not properly
> sanitize certain inputs, such as regex or other JavaScript object
> types, allowing an attacker to inject malicious code. This code could
> be executed when deserialized by a web browser, causing Cross-site
> scripting (XSS) attacks.

Please go ahead.

Regards,

Adam

Reply via email to