`serialize-javascript`

Ecosystem:
npm

Package URL:
pkg:npm/serialize-javascript

Total PRs:
4,160 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
3,340 repositories

Unique Repos (30 days):
79 repositories

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

GHSA-5c6j-r48x-rmvq HIGH published 4 months ago • updated 4 days ago

### Impact The serialize-javascript npm package (versions <= 7.0.2) contains a code injection vulnerability. It is an incomplete fix for CVE-2020-...

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

GHSA-qj8w-gfj5-8c6v CVE-2026-34043 MODERATE published 3 months ago • updated 2 days ago

### Impact **What kind of vulnerability is it?** It is a **Denial of Service (DoS)** vulnerability caused by CPU exhaustion. When serializing a s...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 1 directory with 6 updates

Reality2byte/curve-launchpad #4

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 2 updates

Reality2byte/curve-launchpad #2

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump serialize-javascript and mocha

ministryofjustice/wmt-worker #754

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

marcoroth/formulus #152

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 11 updates

10up/distributor #1314

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago 3 comments

Bump serialize-javascript from 6.0.0 to 6.0.2

matterway/demo-skill-employee-offboarding #3

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): Bump the npm_and_yarn group across 1 directory with 42 updates

ribeirofrv/RTL-testing #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): bump the npm_and_yarn group across 1 directory with 29 updates

ribeirofrv/starwars-planets-search #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 2 updates

zendesk/radar_client #112

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group with 34 updates

0xZach/Sylvain-sso-web #7

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

Bump the npm_and_yarn group across 1 directory with 27 updates

JuloDurden/Mon-Vieux-Grimoire #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

ELY-Na/chatop #7

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 29 updates

clem-s87/Projet-9 #2

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 4 updates

2freemanall/cloudflare-docker-nou #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 4 updates

2freemanall/cloudflare-docker-proxy #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

datakaveri/tgdex-developer-docs #6

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 2 directories with 16 updates

Ramyromel/documentation-hub #38

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /client

lianadanae/Realtor-Assist #97

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 23 updates

colpshift/DOCK_Wellcome-Docker #1

6.0.1 → 6.0.2 Patch PR

Closed about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

jjss886/Sensitize #52

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

bolorundurovj/Mini-Blog #57

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /ui

cmgchess/fide-ui #15

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

symbol-blockchain-community/symbol-web #26

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 27 updates

MoeAda/projet-6-back-end-site-livres #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /client

jameszenartist/postgresql-todolist #30

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

chore(deps): bump serialize-javascript and mocha

MightyBear/node-twitter-api-v2 #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

profjordanov/githubcards #72

6.0.1 → 6.0.2 Patch PR

Closed about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /docs/www in the npm_and_yarn group across 1 directory

geekjapan/static-web-apps-gallery-code-samples #8

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /client

ananthakalusivalingam/react-app #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

madsop/madsop.github.io #1

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 34 updates

clmsnskr/Visual-Design-of-UI-Backends-with-AWS-Amplify-Studio #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 3 directories with 43 updates

clmsnskr/micro-front-end-react-application #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

JOBAYERAHAMED00/angular1 #6

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

Parkyes90/saga #50

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript and mocha

amalfra/lcov-cli-report-viewer #12

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

casteroid/webcam-mirror #18

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

krzsztfwtk/my-portfolio-website #2

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump the npm_and_yarn group with 12 updates

Latina-Dev/latina-dev #206

6.0.1 → 6.0.2 Patch PR

Closed about 1 year ago 2 comments

Bump serialize-javascript from 6.0.1 to 6.0.2

getsentry/sentry.engineering #160

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): bump serialize-javascript from 6.0.0 to 6.0.2 in /legacy

davidsneighbour/davids-neighbour.com #358

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): bump serialize-javascript and mocha in /application-infrastructure/app

chadkluck/serverless-webservice-template-for-pipeline-atlantis #5

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

feat(deps): bump the npm_and_yarn group with 22 updates

i5d6/sentry-javascript #11

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /Web Development with React I/photo-gallery-app

eby8zevin/StackUp #213

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /Getting Started with GraphQL Subscriptions/graphql-subscription/graphql-app

eby8zevin/StackUp #211

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

chore(deps): bump serialize-javascript and @microsoft/sp-build-web in /samples/react-sp-emp-recognition

pnp/sp-dev-fx-webparts #5482

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump the npm_and_yarn group across 1 directory with 41 updates

xlinkbd/docs-1 #12

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 39 updates

koo5/docs #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript and @microsoft/sp-build-web in /samples/react-copilot-aprils-fool

pnp/sp-dev-fx-extensions #1497

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 2 updates

MarcelRaschke/skills-secure-code-game #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

mherman22/mherman22-portfolio #4

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Package Details

Name:	`serialize-javascript`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/serialize-javascript`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

Repository:	https://github.com/yahoo/serialize-javascript
Homepage:	https://github.com/yahoo/serialize-javascript
Latest Release:	`6.0.2` over 2 years ago
Dependent Repos:	1,239,571
Dependent Packages:	2,603
Downloads:	184,953,215
Ranking:	Top 0.028% by dependent repos Top 0.0076% by downloads Top 0.0309% by dependent pkgs

PR Status

Open 2,046 (49.2%)

Merged 530 (12.7%)

Closed 1,319 (31.7%)

PR Types

Major 600 (14.4%)

Minor 29 (0.7%)

Patch 2,923 (70.3%)

Removal 195 (4.7%)

serialize-javascript

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Cross-Site Scripting in serialize-javascript

Cross-site Scripting (XSS) in serialize-javascript

Insecure serialization leading to RCE in serialize-javascript

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`serialize-javascript`