~/products/node-serialize_project/node-serialize

pipeline liveDigest Docs

Node-Serialize Project Node-Serialize vulnerabilities

1 known vulnerability affecting node-serialize_project/node-serialize.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2017-5941P2CRITICALCVSS 9.8PoC≤ 0.0.42017-02-09

CVE-2017-5941 [CRITICAL] CWE-502 CVE-2017-5941: An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).

Node-Serialize Project Node-Serialize vulnerabilities | cvebase