---
title: "Vue. vue-server-renderer’s Dependency Of serialize-javascript To 2.1.2 On Versions Under 2.6.11"
description: "Impact Area Security       Severity Medium       Affected Element ServiceNow UI Script Salesforce Static Resource ## **Rule number** **SN-JSL-VUE-LESSTHAN-V2611 **(for ServiceNow) **SF-JSL-VUE-LESSTHAN-V2611 **(for Salesforce) ## Impact There is a Cross-Site Scripting vulnerability in dependency ‘serialize-javascript’. serialize-javascript is a…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/vulnerabilities-in-open-source-libraries-salesforce/vue-vue-server-renderers-dependency-of-serialize-javascript-to-2-1-2-on-versions-under-2-6-11/"
updated: "2025-03-21"
category: Rules
---

# Vue. vue-server-renderer’s Dependency Of serialize-javascript To 2.1.2 On Versions Under 2.6.11

Impact Area

Security

 

 

 

           Severity

Medium

 

 

 

           Affected Element

ServiceNow

UI Script

Salesforce

Static Resource

## **Rule number**

**SN-JSL-VUE-LESSTHAN-V2611 **(for ServiceNow)

**SF-JSL-VUE-LESSTHAN-V2611 **(for Salesforce)

## Impact

There is a Cross-Site Scripting vulnerability in dependency ‘serialize-javascript’. serialize-javascript is a package to serialize JavaScript to a superset of JSON that includes regular expressions and functions. Affected versions of this package are vulnerable to Arbitrary Code Injection.

Remediation

Update vue JS library to the latest version.

**Time to fix**

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).](https://cwe.mitre.org/data/definitions/79.html)