serialize-javascript: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body (low). GHSA-m5mm-p8h7-m29v, CVE-2026-115754, CVE-2026-115897.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?