Login Request a demo
SE
Product
serialize-javascript
by yahoo · last CVE Oct 23, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
3
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 1Low 2
Severity
All severities4Critical0High1Medium1Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add serialize-javascript to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97711
2.3
0%
Sep 29
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies
Affected: >= 7.1.1, < 7.1.2
CVE-2026-115897
New
2.1
0%
Oct 23
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
Affected: < 7.1.3
Showing 2