{"action":"Upgrade serialize-javascript to 6.0.2 or later.","affected":[{"fixed":"6.0.2","introduced":"6.0.0"}],"component":"serialize-javascript","cve_ids":["CVE-2024-11831"],"ecosystem":"npm","exploited":false,"fixed_versions":["6.0.2"],"ghsa_id":"GHSA-76p7-773f-r4q5","id":"tcs_01M5JHGV3P0QXVZW9JT7VTMP6F","modified_at":"2026-10-15T21:45:05.475338829Z","published_at":"2025-02-10T18:30:47Z","references":["https://osv.dev/vulnerability/GHSA-76p7-773f-r4q5","https://nvd.nist.gov/vuln/detail/CVE-2024-11831","https://github.com/yahoo/serialize-javascript/pull/173","https://github.com/yahoo/serialize-javascript/commit/f27d65d3de42affe2aac14607066c293891cec4e","https://github.com/yahoo/serialize-javascript/commit/7f3ac252d86b802454cb43782820aea2e0f6dc25","https://github.com/yahoo/serialize-javascript","https://bugzilla.redhat.com/show_bug.cgi?id=2312579","https://access.redhat.com/security/cve/CVE-2024-11831","https://access.redhat.com/errata/RHSA-2026:8568","https://access.redhat.com/errata/RHSA-2026:83548","https://access.redhat.com/errata/RHSA-2026:62115","https://access.redhat.com/errata/RHSA-2026:2769","https://access.redhat.com/errata/RHSA-2026:1536","https://access.redhat.com/errata/RHSA-2025:9294","https://access.redhat.com/errata/RHSA-2025:8551","https://access.redhat.com/errata/RHSA-2025:8544","https://access.redhat.com/errata/RHSA-2025:8512","https://access.redhat.com/errata/RHSA-2025:8479","https://access.redhat.com/errata/RHSA-2025:8233","https://access.redhat.com/errata/RHSA-2025:8078","https://access.redhat.com/errata/RHSA-2025:8059","https://access.redhat.com/errata/RHSA-2025:4511","https://access.redhat.com/errata/RHSA-2025:3870","https://access.redhat.com/errata/RHSA-2025:21203","https://access.redhat.com/errata/RHSA-2025:21068","https://access.redhat.com/errata/RHSA-2025:1468","https://access.redhat.com/errata/RHSA-2025:1334","https://access.redhat.com/errata/RHSA-2025:10853","https://access.redhat.com/errata/RHSA-2025:0381","https://access.redhat.com/errata/RHBA-2025:0304"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-76p7-773f-r4q5","url":"https://osv.dev/vulnerability/GHSA-76p7-773f-r4q5"}],"summary":"Cross-site Scripting (XSS) in serialize-javascript"}