CVE-2020-7660

Published June 1st, 2020

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

yahoo/serialize-javascript

Serialize JavaScript to a superset of JSON that includes regular expressions and functions.

GitHub

2.92K