CVE-2019-16772

CVE-2019-16772 describes a Cross-site Scripting (XSS) vulnerability in the serialize-to-js NPM package prior to version 3.0.1, specifically impacting environments outside of Node.js due to improper handling of unsafe characters in serialized regular expressions. This medium-severity vulnerability has a CVSS score of 6.1, indicating it can be exploited remotely with low attack complexity, requiring user interaction, and potentially leading to low impact on confidentiality and integrity. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting a low current threat landscape.