Control: tags -1 + confirmed On Wed, 2025-04-09 at 13:59 +0200, Yadd wrote: > A flaw was found in npm-serialize-javascript. The vulnerability > occurs because the serialize-javascript module does not properly > sanitize certain inputs, such as regex or other JavaScript object > types, allowing an attacker to inject malicious code. This code could > be executed when deserialized by a web browser, causing Cross-site > scripting (XSS) attacks.
Please go ahead. Regards, Adam