yahoo serialize-javascript

• CVE-2026-115897 Low 2.1 Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body 0.3%
• CVE-2026-115754 Medium 4.7 serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body 0.2%
• CVE-2026-97711 Low 2.3 Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies 0.3%
• CVE-2026-34043 Medium 5.9 Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects 0.5%