`serialize-javascript`

Ecosystem:
npm

Package URL:
pkg:npm/serialize-javascript

Total PRs:
4,161 Dependabot PRs

Latest PR:
about 7 hours ago

Unique Repositories:
3,341 repositories

Unique Repos (30 days):
33 repositories

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

GHSA-5c6j-r48x-rmvq HIGH published 4 months ago • updated 7 days ago

### Impact The serialize-javascript npm package (versions <= 7.0.2) contains a code injection vulnerability. It is an incomplete fix for CVE-2020-...

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

GHSA-qj8w-gfj5-8c6v CVE-2026-34043 MODERATE published 3 months ago • updated 1 day ago

### Impact **What kind of vulnerability is it?** It is a **Denial of Service (DoS)** vulnerability caused by CPU exhaustion. When serializing a s...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): bump serialize-javascript and mocha

pact-foundation/pact-js-core #606

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and mocha

opensearch-project/opensearch-dashboards-functional-test #1718

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

brokolidev/birdboard #74

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /tgui

BeeStation/BeeStation-Hornet #12306

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump serialize-javascript from 6.0.0 to 6.0.2 in /hs_discover

hydroshare/hydroshare #5749

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 4 comments

Bump serialize-javascript from 6.0.1 to 6.0.2

Som-Energia/decidim-som-energia-app #149

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and webpack

wangxudongcc/vue_test #114

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and mocha in /test-extension/simple-browser-extension

massalabs/wallet-provider #299

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha in /lottery-boilerplate/lottery

steffensbola/ethereum-solidity-development-course #31

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

microsoft/dev-tunnels-ssh #114

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump the npm_and_yarn group in /server with 2 updates

realworld666/server-template #35

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2

VilledeMontreal/angular-ui #241

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

xiemingzhi/vue-material-app #68

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

build(deps): bump serialize-javascript and mocha in /test/cli-tests

kubeshop/testkube #6174

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

chore(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2 in /interface/modules/custom_modules/oe-module-comlink-telehealth/public/assets/js

openemr/openemr #8034

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and mocha

testomatio/check-tests #202

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

concordnow/ember-aria-tabs #649

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump serialize-javascript and mocha

Almenon/AREPL-backend #207

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

build(deps): bump serialize-javascript and mocha

weixu365/serverless-scriptable-plugin #211

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

chore(deps): bump serialize-javascript and mocha

eslint-community/eslint-plugin-security #169

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 in /example-project

spaceagetv/electron-playwright-helpers #66

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

chore(deps): bump serialize-javascript and mocha

electron/apps #2163

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 6 comments

chore(deps): bump serialize-javascript from 6.0.1 to 6.0.2

patternfly/patternfly-quickstarts #367

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

chore(deps): bump serialize-javascript from 6.0.1 to 6.0.2

smithy-lang/smithy-typescript #1524

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

build(deps): bump the npm_and_yarn group with 2 updates

meteorrn/meteor-react-native #166

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump the npm_and_yarn group with 4 updates

10up/maps-block-apple #234

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 4 comments

Bump serialize-javascript and mocha

rsksmart/2wp-api #392

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and mocha

ensuro/ensuro #199

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript from 6.0.0 to 6.0.2 in /docroot/modules/contrib/gin_login

IIED-org/IIED-main #948

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

ministryofjustice/hmpps-adjustments #489

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago

Bump the npm_and_yarn group across 1 directory with 2 updates

FalkorDB/falkordb-ts #288

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 4 comments

Bump serialize-javascript and mocha

aws/aws-xray-sdk-node #710

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript and mocha

VSpaceCode/VSpaceCode #387

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

chore(deps): bump serialize-javascript and mocha in /api-tests

hashgraph/guardian #4643

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

build(deps): bump serialize-javascript from 6.0.1 to 6.0.2 in /ui

datachecks/dcs-core #284

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and mocha

gengle/typebox #2

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump serialize-javascript from 6.0.1 to 6.0.2

lucasmicheli/weather #71

6.0.1 → 6.0.2 Patch PR

Merged over 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /ng12

retejs/angular-plugin #143

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 3 comments

Bump serialize-javascript from 6.0.1 to 6.0.2

nirnejak/angular-todolist #66

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

iobroker-community-adapters/ioBroker.countdown #140

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

ChromeDevTools/devtools-frontend #198

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and mocha

iobroker-community-adapters/ioBroker.snmp #516

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

curityio/angular-assisted-token-website #61

6.0.1 → 6.0.2 Patch PR

Merged over 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /angular

Svetuli-s-Organization/Finance-Manager #102

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2 in /knox-webshell-ui

apache/knox #990

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

Bump serialize-javascript from 6.0.1 to 6.0.2 in /WebClient

dfederm/ClickerHeroesTracker #1334

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 3 comments

build(deps): Bump serialize-javascript in /website

tclindner/npm-package-json-lint #1514

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

chore(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2

VadimDez/ng2-pdf-viewer #1178

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

takanakahiko/takanakahiko.me #710

6.0.1 → 6.0.2 Patch PR

Merged over 1 year ago 1 comment

Bump serialize-javascript and mocha

SVG-Edit/svgedit #1020

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Package Details

Name:	`serialize-javascript`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/serialize-javascript`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

Repository:	https://github.com/yahoo/serialize-javascript
Homepage:	https://github.com/yahoo/serialize-javascript
Latest Release:	`6.0.2` over 2 years ago
Dependent Repos:	1,239,571
Dependent Packages:	2,603
Downloads:	184,953,215
Ranking:	Top 0.028% by dependent repos Top 0.0076% by downloads Top 0.0309% by dependent pkgs

PR Status

Open 2,046 (49.2%)

Merged 530 (12.7%)

Closed 1,320 (31.7%)

PR Types

Major 601 (14.4%)

Minor 29 (0.7%)

Patch 2,923 (70.2%)

Removal 195 (4.7%)

serialize-javascript

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Cross-Site Scripting in serialize-javascript

Cross-site Scripting (XSS) in serialize-javascript

Insecure serialization leading to RCE in serialize-javascript

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`serialize-javascript`