serialize-javascript
NPM Package
Vulnerability Check
Serialize JavaScript to a superset of JSON that includes regular expressions and functions.
serialize-javascript
Advisory Breakdown
Severity Rating
High severity5 advisories
High severity
Weekly downloads
49,822,191
Total advisories
5
Latest version
7.0.5
License
BSD-3-Clause
Known advisories
OSV records for the npm ecosystem
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
Cross-site Scripting (XSS) in serialize-javascript
Cross-Site Scripting in serialize-javascript
Insecure serialization leading to RCE in serialize-javascript
Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
Checked Jun 15, 2026, 10:50 AM from npm and OSV.dev
Package metadata
From the npm registry
- Package name
- serialize-javascript
- Ecosystem
- npm
- Latest version
- 7.0.5
- License
- BSD-3-Clause
- Weekly downloads
- 49,822,191
- Repository
- Open repository
Remediation boundary
What RequestGuard does — and doesn't — cover
RequestGuard does not fix npm package vulnerabilities. Dependency remediation happens through package updates, patches, lockfile changes, and maintainer guidance. RequestGuard can help mitigate runtime abuse around exposed web and API flows while remediation is handled separately.
Data from npm registry and OSV.dev · Checked 6/15/2026, 10:50:15 AM