- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/23/2026, serialize-javascript recorded 2 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of serialize-javascript and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115897Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function bodyCVE-2026-115754serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function bodyCVE-2026-97711Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodiesCVE-2026-34043Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objectsCVE-2019-16769Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-115897Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body | Exploitation statusNot confirmed | FixYes | Published10/23/2026 | SeverityLow |
CVE-2026-115754serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body | Exploitation statusNot exploited | FixYes | Published10/23/2026 | SeverityLow |
CVE-2026-97711Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies | Exploitation statusNot exploited | FixYes | Published09/29/2026 | SeverityLow |
CVE-2026-34043Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects | Exploitation statusNot exploited | FixYes | Published03/31/2026 | SeverityMedium |
CVE-2019-16769Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) | Exploitation statusNot confirmed | FixYes | Published12/05/2019 | SeverityMedium |
5 Results | Page 1 of 1