`serialize-javascript`

Ecosystem:
npm

Package URL:
pkg:npm/serialize-javascript

Total PRs:
4,161 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
3,341 repositories

Unique Repos (30 days):
33 repositories

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

GHSA-5c6j-r48x-rmvq HIGH published 4 months ago • updated 7 days ago

### Impact The serialize-javascript npm package (versions <= 7.0.2) contains a code injection vulnerability. It is an incomplete fix for CVE-2020-...

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

GHSA-qj8w-gfj5-8c6v CVE-2026-34043 MODERATE published 3 months ago • updated 1 day ago

### Impact **What kind of vulnerability is it?** It is a **Denial of Service (DoS)** vulnerability caused by CPU exhaustion. When serializing a s...

Recent PRs

RSS Feed

Bump serialize-javascript from 6.0.1 to 6.0.2 in /Websites/browserbench.org/Speedometer3.1/resources/todomvc/vanilla-examples/javascript-es6-webpack

notti-io/WebKit #1

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2 in /macapp

notti-io/ollama #1

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2

notti-io/voice-over-translation #2

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript and mocha

notti-io/jwplayer #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

notti-io/romhub #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

jon23d/jonnylist #7

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

Bump serialize-javascript and mocha

Apollon77/ioBroker.daikin #201

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump serialize-javascript and mocha

AiDarkEzio/main-func #10

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago 1 comment

Bump serialize-javascript and mocha

emn178/js-sha256 #50

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 3 updates

developer-eco/tracker-blocklists #2

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): bump the npm_and_yarn group across 2 directories with 9 updates

robert-iw3/tooling #308

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

AuntyEms/prettier #9

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

bitfocus/companion-module-knx-ip #16

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

chore(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2

rryter/forms-experiment #6

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 27 updates

manarlam/Le_Vieux_Grimoire #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 27 updates

manarlam/Le_Vieux_Grimoire_Backend #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript and mocha

BonnierNews/bn-oidc-connector #9

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

Bump serialize-javascript and mocha in /packages/mybatis-mapper

sclab-io/sclab-agent #11

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

shaneiadt/robo-friends-pwa #78

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 25 updates

vadim-belan/foodgram-st #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

Alvin-Karanja/starmatchgame #24

6.0.1 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

vimota/vimota #24

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

atlassian/react-sweet-state #240

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump serialize-javascript and mocha

smalldee/bitcoin-simple-keyring #2

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

CamilleLinan/Projet-7-Groupomania-Front #22

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript and mocha

wdawson/vscode-bkr #12

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /wp-themes.com/public_html/wp-content/plugins/pattern-page

mindblowngaming/wordpress.org #3

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-2076/contoso #6

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

npm(deps): bump serialize-javascript from 6.0.1 to 6.0.2

ArseniumGX/adrasteia-client #58

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript and mocha

pirumpi/sftp-upload #30

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump the npm_and_yarn group across 1 directory with 28 updates

lisagorewitdecker/https-github.com-react_portfolio #1

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

IanCot/la6begginer #62

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 in the npm_and_yarn group across 1 directory

rodekruis/ADA-UI #39

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 in the npm_and_yarn group across 1 directory

rodekruis/ADA-API #39

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

Bump the npm_and_yarn group across 3 directories with 35 updates

Codaxime/Cypress-final #1

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in the npm_and_yarn group across 1 directory

SquareHatLtd/React-Authentication-Form #2

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago 3 comments

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2

Monireh6569/vConsole #5

6.0.0 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2

Tachii/artisan-gui #36

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago 1 comment

chore(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 in /src/RoadRegistry.BackOffice.UI

Informatievlaanderen/road-registry #1682

6.0.0 → 6.0.2 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump serialize-javascript from 6.0.1 to 6.0.2

thingworx-field-work/QueryBuilderWidgetTWX #51

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2

Sharcoux/slider #129

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-1257/devsecops #2

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-2135/devsecops #2

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-1258/devsecops #3

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

build(deps): bump serialize-javascript and mocha

ufukty/dim #6

6.0.0 → 6.0.2 Patch PR

Merged about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-2136/devsecops #1

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-2125/devsecops #5

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-1390/devsecops #2

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-1370/hx-demo #3

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Bump serialize-javascript from 6.0.1 to 6.0.2 in /src/ContosoTraders.Ui.Website

github-cloudlabsuser-2127/devsecops #1

6.0.1 → 6.0.2 Patch PR

Open about 1 year ago

Package Details

Name:	`serialize-javascript`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/serialize-javascript`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

Repository:	https://github.com/yahoo/serialize-javascript
Homepage:	https://github.com/yahoo/serialize-javascript
Latest Release:	`6.0.2` over 2 years ago
Dependent Repos:	1,239,571
Dependent Packages:	2,603
Downloads:	184,953,215
Ranking:	Top 0.028% by dependent repos Top 0.0076% by downloads Top 0.0309% by dependent pkgs

PR Status

Open 2,046 (49.2%)

Merged 530 (12.7%)

Closed 1,320 (31.7%)

PR Types

Major 601 (14.4%)

Minor 29 (0.7%)

Patch 2,923 (70.2%)

Removal 195 (4.7%)

serialize-javascript

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

Cross-Site Scripting in serialize-javascript

Cross-site Scripting (XSS) in serialize-javascript

Insecure serialization leading to RCE in serialize-javascript

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

Recent PRs

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`serialize-javascript`