`serialize-javascript`

Ecosystem:
npm

Package URL:
pkg:npm/serialize-javascript

Total PRs:
4,164 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
3,343 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()

GHSA-5c6j-r48x-rmvq HIGH published 4 months ago • updated 10 days ago

### Impact The serialize-javascript npm package (versions <= 7.0.2) contains a code injection vulnerability. It is an incomplete fix for CVE-2020-...

Cross-site Scripting (XSS) in serialize-javascript

GHSA-76p7-773f-r4q5 CVE-2024-11831 MODERATE published over 1 year ago • updated 3 days ago

A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain i...

Cross-Site Scripting in serialize-javascript

GHSA-h9rv-jmmf-4pgx CVE-2019-16769 MODERATE published over 6 years ago • updated 8 days ago

Versions of `serialize-javascript` prior to 2.1.1 are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize serialized regular ex...

Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

GHSA-qj8w-gfj5-8c6v CVE-2026-34043 MODERATE published 3 months ago • updated 5 days ago

### Impact **What kind of vulnerability is it?** It is a **Denial of Service (DoS)** vulnerability caused by CPU exhaustion. When serializing a s...

Insecure serialization leading to RCE in serialize-javascript

GHSA-hxcc-f52p-wc94 CVE-2020-7660 HIGH published almost 6 years ago • updated 8 days ago

serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js". An obj...

Recent PRs

RSS Feed

Bump serialize-javascript and terser-webpack-plugin in /drupal/modules/avoindata-header

vrk-kpa/opendata #2534

5.0.1 → 6.0.2 Major PR

Closed over 1 year ago 2 comments

Bump serialize-javascript and mocha

opensearch-project/opensearch-dashboards-functional-test #1718

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago

Bump serialize-javascript and react-scripts

Otromascomotu/Proyecto-Final-React-JS #10

4.0.0 → 6.0.2 Major PR

Merged over 1 year ago

Bump serialize-javascript from 4.0.0 to 6.0.2 in /client/angular

duttonw/pwm-project #35

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 1 comment

Bump the npm_and_yarn group across 2 directories with 3 updates

aaron97neu/Discovery-World-Pong #261

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 2 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

SixPivot/PivotProReleaseDashboard #16

4.0.0 → 6.0.2 Major PR

Open over 1 year ago 5 comments

Bump serialize-javascript from 6.0.0 to 6.0.2

brokolidev/birdboard #74

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

Bump serialize-javascript from 6.0.0 to 6.0.2 in /tgui

BeeStation/BeeStation-Hornet #12306

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump serialize-javascript from 6.0.0 to 6.0.2 in /hs_discover

hydroshare/hydroshare #5749

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 4 comments

Bump serialize-javascript from 6.0.1 to 6.0.2

Som-Energia/decidim-som-energia-app #149

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and webpack

wangxudongcc/vue_test #114

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and mocha in /test-extension/simple-browser-extension

massalabs/wallet-provider #299

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and webpack in /localControl

hardillb/node-red-contrib-googlehome-web #103

4.0.0 → 6.0.2 Major PR

Open over 1 year ago 2 comments

Bump serialize-javascript and mocha in /lottery-boilerplate/lottery

steffensbola/ethereum-solidity-development-course #31

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

microsoft/dev-tunnels-ssh #114

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump the npm_and_yarn group in /server with 2 updates

realworld666/server-template #35

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

build(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2

VilledeMontreal/angular-ui #241

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

xiemingzhi/vue-material-app #68

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

build(deps): bump serialize-javascript and workbox-build in /vertx-vaadin-tests/test-frontend/vite-production

mcollovati/vertx-vaadin #157

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 2 comments

build(deps): bump serialize-javascript and mocha in /test/cli-tests

kubeshop/testkube #6174

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

chore(deps-dev): bump serialize-javascript from 6.0.1 to 6.0.2 in /interface/modules/custom_modules/oe-module-comlink-telehealth/public/assets/js

openemr/openemr #8034

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and mocha

testomatio/check-tests #202

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript from 6.0.1 to 6.0.2

concordnow/ember-aria-tabs #649

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump serialize-javascript and mocha

Almenon/AREPL-backend #207

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

build(deps): bump serialize-javascript and mocha

weixu365/serverless-scriptable-plugin #211

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

chore(deps): bump serialize-javascript and mocha

eslint-community/eslint-plugin-security #169

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

build(deps-dev): bump serialize-javascript from 6.0.0 to 6.0.2 in /example-project

spaceagetv/electron-playwright-helpers #66

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

chore(deps): bump serialize-javascript and mocha

electron/apps #2163

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 6 comments

chore(deps): bump serialize-javascript from 5.0.1 to 6.0.2

AlexSergey/rockpack #67

5.0.1 → 6.0.2 Major PR

Closed over 1 year ago 1 comment

chore(deps): bump serialize-javascript from 6.0.1 to 6.0.2

patternfly/patternfly-quickstarts #367

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 2 comments

chore(deps): bump serialize-javascript from 6.0.1 to 6.0.2

smithy-lang/smithy-typescript #1524

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

Bump serialize-javascript and @angular-devkit/build-angular in /trendly

googleinterns/Trendly #46

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 1 comment

build(deps): bump the npm_and_yarn group with 2 updates

meteorrn/meteor-react-native #166

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Bump the npm_and_yarn group with 4 updates

10up/maps-block-apple #234

6.0.1 → 6.0.2 Patch PR

Open over 1 year ago 4 comments

Bump serialize-javascript and webpack in /fixtures/ssr2

Rashdamada/react #134

4.0.0 → 6.0.2 Major PR

Open over 1 year ago 5 comments

Bump serialize-javascript and mocha

rsksmart/2wp-api #392

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and mocha

ensuro/ensuro #199

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and webpack-stream in /docroot/libraries/mmenu

IIED-org/IIED-main #949

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 1 comment

Bump serialize-javascript from 6.0.0 to 6.0.2 in /docroot/modules/contrib/gin_login

IIED-org/IIED-main #948

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

Bump serialize-javascript and mocha

ministryofjustice/hmpps-adjustments #489

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago

Bump the npm_and_yarn group across 1 directory with 2 updates

FalkorDB/falkordb-ts #288

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 4 comments

Bump serialize-javascript and webpack in /scripts

OroshiX/OroshiX.github.io #74

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 2 comments

Bump serialize-javascript and webpack in /fixtures/ssr2

samkenxstream/SAMkenXStream-react #156

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago 3 comments

Bump serialize-javascript and webpack in /fixtures/ssr2

webfutureiorepo/react #168

4.0.0 → 6.0.2 Major PR

Open over 1 year ago 4 comments

Bump serialize-javascript and mocha

aws/aws-xray-sdk-node #710

6.0.0 → 6.0.2 Patch PR

Open over 1 year ago 1 comment

Bump serialize-javascript and mocha

VSpaceCode/VSpaceCode #387

6.0.0 → 6.0.2 Patch PR

Merged over 1 year ago

chore(deps): bump serialize-javascript and mocha in /api-tests

hashgraph/guardian #4643

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 1 comment

build(deps): bump serialize-javascript from 6.0.1 to 6.0.2 in /ui

datachecks/dcs-core #284

6.0.1 → 6.0.2 Patch PR

Closed over 1 year ago

build(deps): bump serialize-javascript and vite-plugin-pwa in /client

jeferson-sb/node-chat-app #245

4.0.0 → 6.0.2 Major PR

Closed over 1 year ago

Bump serialize-javascript and mocha

gengle/typebox #2

6.0.0 → 6.0.2 Patch PR

Closed over 1 year ago 2 comments

Package Details

Name:	`serialize-javascript`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/serialize-javascript`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 2

MODERATE 3

View All npm Advisories

Package Information

Description:

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

Repository:	https://github.com/yahoo/serialize-javascript
Homepage:	https://github.com/yahoo/serialize-javascript
Latest Release:	`6.0.2` over 2 years ago
Dependent Repos:	1,239,571
Dependent Packages:	2,603
Downloads:	184,953,215
Ranking:	Top 0.028% by dependent repos Top 0.0076% by downloads Top 0.0309% by dependent pkgs

PR Status

Open 2,047 (49.2%)

Merged 530 (12.7%)

Closed 1,322 (31.7%)

PR Types

Major 603 (14.5%)

Minor 29 (0.7%)

Patch 2,924 (70.2%)

Removal 195 (4.7%)