CVE-2019-16772: Cross-site Scripting

December 7, 2019 (updated December 9, 2019)

The serialize-to-js NPM package is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability.

References

nvd.nist.gov/vuln/detail/CVE-2019-16772

Detect and mitigate CVE-2019-16772 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →