CVE-2019-16769: Cross-site Scripting

December 5, 2019 (updated December 13, 2019)

The serialize-javascript npm package is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2019-16769

Detect and mitigate CVE-2019-16769 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →