Known vulnerabilities in Serialize-javascript

Vendor: Yahoo
Software: Serialize-javascript
Software CPE: cpe:2.3:a:yahoo:serialize-javascript:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Serialize-javascript Serialize-javascript is affected by 5 known vulnerabilities: 2 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128354 - Deserialization of Untrusted Data
 CWE-502 High
No
No
 7.0.3 28.04.2026 SB20260428184
#VU128353 - Resource exhaustion
CVE-2026-34043		 CWE-400 Medium
No
No
 7.0.5 28.04.2026 SB20260428183
SB2026052719
SB2026052720
and 7 more
#VU114068 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16769		 CWE-79 Low
No
No
 2.1.1 14.08.2025 SB2019120542
#VU86835 - Deserialization of Untrusted Data
CVE-2020-7660		 CWE-502 High
No
No
 3.1.0 27.02.2024 SB2024022730
SB2020070752
SB2026031635
and 2 more
#VU85240 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-11831		 CWE-79 Medium
No
No
 6.0.2 09.01.2024 SB2024010997
SB2025021411
SB2025021412
and 17 more