yahoo / serialize-javascript Public

• Notifications You must be signed in to change notification settings
• Fork 207

• Star 2.9k

No security policy detected

This project has not set up a SECURITY.md file yet.

• Denial of Service (CPU Exhaustion) via crafted array-like objects

  GHSA-qj8w-gfj5-8c6v published Mar 25, 2026 by okuryu

  Moderate

• RCE via RegExp.flags and Date.prototype.toISOString()

  GHSA-5c6j-r48x-rmvq published Feb 27, 2026 by redonkulus

  High

• regular expressions Cross-Site Scripting (XSS) vulnerability

  GHSA-h9rv-jmmf-4pgx published Dec 4, 2019 by redonkulus

  Moderate

Learn more about advisories related to yahoo/serialize-javascript in the GitHub Advisory Database