Skip to content

Vendor

node-serialize project vulnerabilities

1 published CVE affecting node-serialize project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of node-serialize project alerts

Products

Latest node-serialize project CVEs

Newest publication first

  1. CVE-2017-5941 Code Execution through IIFE in node-serialize

    Published
    CriticalCVSS 9.8 EPSS 61.3% Public exploit

    An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.