CVE-2020-7660: Verizon Serialize-JavaScript

High severity, CVSS 8.1. EPSS: 3% chance of exploitation in the next 30 days.

serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".

Affected products

• Verizon Serialize-JavaScript: before 3.1.0 (fixed in 3.1.0)

Published 2020-06-01. Last modified 2026-06-17.