Description
Versions of serialize-to-js prior to 2.0.0 are vulnerable to Denial of Service. User input is not properly validated, allowing attackers to provide inputs that lead the execution to loop indefinitely.
Recommendation
Update the serialize-to-js package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.0.0
- Patched version(s): 2.0.0
References
Could your website be exposed too?
SmartScanner can check your website for Denial of Service in serialize-to-js and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular Expression Denial of Service in underscore.string - Vulnerability
- tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability - CVE-2026-22809
- Denial of Service in url-relative - Vulnerability
- Regular Expression Denial of Service in millisecond - Vulnerability
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023