Skip to content

Product

node-serialize project node-serialize vulnerabilities

1 published CVE affecting node-serialize project node-serialize, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest node-serialize project node-serialize CVEs

Newest publication first

  1. CVE-2017-5941 Code Execution through IIFE in node-serialize

    Published
    CriticalCVSS 9.8 EPSS 61.3% Public exploit

    An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.