Bug#1102478: bookworm-pu: package node-serialize-javascript/6.0.0-2+deb12u1

["Adam D. Barratt" <adam@adam-barratt.org.uk>]

Control: tags -1 + confirmed

On Wed, 2025-04-09 at 13:59 +0200, Yadd wrote:
> A flaw was found in npm-serialize-javascript. The vulnerability
> occurs because the serialize-javascript module does not properly
> sanitize certain inputs, such as regex or other JavaScript object
> types, allowing an attacker to inject malicious code. This code could
> be executed when deserialized by a web browser, causing Cross-site
> scripting (XSS) attacks.

Please go ahead.

Regards,

Adam