GHSA-w5q7-3pr9-x44w
Denial of Service in serialize-to-js
Versions of serialize-to-js prior to 2.0.0 are vulnerable to Denial of Service. User input is not properly validated, allowing attackers to provide inputs that lead the execution to loop indefinitely.
Recommendation
Upgrade to version 2.0.0 or later.
What each source reports
GitHub AdvisoriesNo score
Denial of Service in serialize-to-js
Versions of serialize-to-js prior to 2.0.0 are vulnerable to Denial of Service. User input is not properly validated, allowing attackers to provide inputs that lead the execution to loop indefinitely.
Recommendation
Upgrade to version 2.0.0 or later.
- Record
GHSA-w5q7-3pr9-x44w- Updated
- 2026-11-02
OSVNo score
Denial of Service in serialize-to-js
Versions of serialize-to-js prior to 2.0.0 are vulnerable to Denial of Service. User input is not properly validated, allowing attackers to provide inputs that lead the execution to loop indefinitely.
Recommendation
Upgrade to version 2.0.0 or later.
- Record
GHSA-w5q7-3pr9-x44w- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
serialize-to-jsnpm | before 2.0.0 | 2.0.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-w5q7-3pr9-x44w is a vulnerability with no CVSS score yet in serialize-to-js, published September 2, 2020. No source lists public exploit code. Fixed in serialize-to-js 2.0.0.