CVE-2024-11831

CVE-2024-11831 is a Cross-site Scripting (XSS) vulnerability in the npm-serialize-javascript module, affecting environments where serialized data is sent to web clients. An attacker can inject malicious code by providing unsanitized regex or other JavaScript object types, which then executes upon deserialization in a web browser. Rated as Medium severity (CVSS 5.4), this flaw requires user interaction and low privileges but can compromise website or web application security. There is no evidence of active exploitation, public exploit code, or significant media coverage, though it has received some community discussion.