Description
Affected versions of serialize-to-js may be vulnerable to arbitrary code execution through an Immediately Invoked Function Expression (IIFE).
Recommendation
Update the serialize-to-js package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.0.0
- Patched version(s): 1.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Code Execution Through IIFE in serialize-to-js and gives you actionable findings to investigate.
Start a free scanRelated Issues
- OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment - CVE-2026-41900
- ejs is vulnerable to remote code execution due to weak input validation - CVE-2017-1000228
- Arbitrary Code Execution in mathjs - CVE-2017-1001003
- Arbitrary Code Execution in mathjs - mathjs - CVE-2017-1001002
You might also like:
See something that needs correcting? Let us knowUpdated November 29, 2023


