yahoo serialize-javascript vulnerabilities

CVEs per yearBy the year they were published

1. 20191
2. 20264

Newest CVEs

• CVE-2026-115897

  Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body

  yahoo · serialize-javascript

  Low2.1
• CVE-2026-115754

  serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body

  yahoo · serialize-javascript

  Low2.3
• CVE-2026-97711

  Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies

  yahoo · serialize-javascript

  Low2.3
• CVE-2026-34043

  Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

  yahoo · serialize-javascript

  Medium5.9
• CVE-2019-16769

  Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS)

  yahoo · serialize-javascript

  Medium4.2