AIKIDO-2024-10066

serialize-javascript is vulnerable to Cross-site Scripting (XSS)

Cross-site Scripting (XSS)CVE-2024-11831 Published Apr 30, 2024

Medium Risk

This Affects:

serialize-javascript

6.0.0 - 6.0.1

Fixed in 6.0.2

Are you affected? Scan for Free

TL;DR

Affected versions of the serialize-javascript library are vulnerable to Cross-site Scripting (XSS) due to unsanitized URLs. Attackers can inject unsafe HTML characters through non-HTTP URLs in the serialize function.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

serialize-javascript is vulnerable to Cross-site Scripting (XSS) in versions 6.0.0 - 6.0.1.

How to fix this

Upgrade the serialize-javascript library to the patch version.

Medium Risk

This Affects:

serialize-javascript

6.0.0 - 6.0.1

Fixed in 6.0.2

Are you affected? Scan for Free

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free

Book a Demo

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

hello@aikido.dev

Security

Stay up to date with all updates

LinkedIn YouTube X

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US

SOC 2Compliant

ISO 27001Compliant

AIKIDO-2024-10066

This Affects:

TL;DR

Who does this affect?

Background info

How to fix this

This Affects:

Links

GitHub Release

Fix Commit

Fix PR

Other

Are You Affected?