GitHub Advisoryadvisory · npm

GHSA-w5q7-3pr9-x44w Denial of Service in serialize-to-js

HIGH Published 2020-09-02 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
serialize-to-js
Severity
High
Reviewed
2020-08-31

Affected packages

• npm serialize-to-js: < 2.0.0 → fixed in 2.0.0

Description

Versions of `serialize-to-js` prior to 2.0.0 are vulnerable to Denial of Service. User input is not properly validated, allowing attackers to provide inputs that lead the execution to loop indefinitely. Recommendation Upgrade to version 2.0.0 or later.

References