CVE-2019-16769 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-16769 Interim 1 12 2026-03-05T06:07:47Z current 2021-05-30T14:31:57Z 2026-03-05T06:07:47Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-16769 The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-March/006607.html E-Mail link for SUSE-SU-2020:0671-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Manager Proxy Module 4.0 SUSE Manager Server Module 4.0 branch-network-formula-0.1.1580471316.1839544-3.10.2 image-sync-formula-0.1.1579102150.4716559-3.11.2 mgr-osa-dispatcher-4.0.11-3.9.2 mgr-osad-4.0.11-3.9.2 patterns-suma_proxy-4.0-9.10.2 patterns-suma_retail-4.0-9.10.2 patterns-suma_server-4.0-9.10.2 prometheus-formula-0.1-4.7.2 pxe-default-image-sle15-4.0.1-20200305173027 pxe-formula-0.1.1580384994.6076a7e-3.11.2 py26-compat-salt-2016.11.10-10.11.2 python3-mgr-osa-common-4.0.11-3.9.2 python3-mgr-osa-dispatcher-4.0.11-3.9.2 python3-mgr-osad-4.0.11-3.9.2 python3-spacewalk-backend-libs-4.0.30-3.23.3 python3-spacewalk-certs-tools-4.0.15-3.15.2 python3-spacewalk-check-4.0.12-3.13.2 python3-spacewalk-client-setup-4.0.12-3.13.2 python3-spacewalk-client-tools-4.0.12-3.13.2 python3-susemanager-retail-1.0.1580471316.1839544-3.13.2 redstone-xmlrpc-1.1_20071120-0.11.3.2 salt-netapi-client-0.17.0-4.3.2 spacecmd-4.0.18-3.13.2 spacewalk-admin-4.0.9-3.6.2 spacewalk-backend-4.0.30-3.23.3 spacewalk-backend-app-4.0.30-3.23.3 spacewalk-backend-applet-4.0.30-3.23.3 spacewalk-backend-config-files-4.0.30-3.23.3 spacewalk-backend-config-files-common-4.0.30-3.23.3 spacewalk-backend-config-files-tool-4.0.30-3.23.3 spacewalk-backend-iss-4.0.30-3.23.3 spacewalk-backend-iss-export-4.0.30-3.23.3 spacewalk-backend-package-push-server-4.0.30-3.23.3 spacewalk-backend-server-4.0.30-3.23.3 spacewalk-backend-sql-4.0.30-3.23.3 spacewalk-backend-sql-postgresql-4.0.30-3.23.3 spacewalk-backend-tools-4.0.30-3.23.3 spacewalk-backend-xml-export-libs-4.0.30-3.23.3 spacewalk-backend-xmlrpc-4.0.30-3.23.3 spacewalk-base-4.0.19-3.18.3 spacewalk-base-minimal-4.0.19-3.18.3 spacewalk-base-minimal-config-4.0.19-3.18.3 spacewalk-certs-tools-4.0.15-3.15.2 spacewalk-check-4.0.12-3.13.2 spacewalk-client-setup-4.0.12-3.13.2 spacewalk-client-tools-4.0.12-3.13.2 spacewalk-html-4.0.19-3.18.3 spacewalk-java-4.0.31-3.23.1 spacewalk-java-config-4.0.31-3.23.1 spacewalk-java-lib-4.0.31-3.23.1 spacewalk-java-postgresql-4.0.31-3.23.1 spacewalk-search-4.0.9-3.11.2 spacewalk-setup-4.0.13-3.11.1 spacewalk-taskomatic-4.0.31-3.23.1 spacewalk-utils-4.0.16-3.15.2 subscription-matcher-0.25-3.3.2 supportutils-plugin-susemanager-client-4.0.3-3.3.2 supportutils-plugin-susemanager-proxy-4.0.3-3.3.2 susemanager-4.0.22-3.20.3 susemanager-doc-indexes-4.0-10.18.2 susemanager-docs_en-4.0-10.18.2 susemanager-docs_en-pdf-4.0-10.18.2 susemanager-retail-tools-1.0.1580471316.1839544-3.13.2 susemanager-schema-4.0.18-3.17.2 susemanager-sls-4.0.24-3.17.2 susemanager-sync-data-4.0.16-3.15.2 susemanager-tools-4.0.22-3.20.3 susemanager-web-libs-4.0.19-3.18.3 system-lock-formula-0.2-4.5.1 virtualization-host-formula-0.2-4.3.2 mgr-osad-4.0.11-3.9.2 as a component of SUSE Manager Proxy Module 4.0 patterns-suma_proxy-4.0-9.10.2 as a component of SUSE Manager Proxy Module 4.0 python3-mgr-osa-common-4.0.11-3.9.2 as a component of SUSE Manager Proxy Module 4.0 python3-mgr-osad-4.0.11-3.9.2 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-backend-libs-4.0.30-3.23.3 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-certs-tools-4.0.15-3.15.2 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-check-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-client-setup-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 python3-spacewalk-client-tools-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 spacecmd-4.0.18-3.13.2 as a component of SUSE Manager Proxy Module 4.0 spacewalk-backend-4.0.30-3.23.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-4.0.19-3.18.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-base-minimal-config-4.0.19-3.18.3 as a component of SUSE Manager Proxy Module 4.0 spacewalk-certs-tools-4.0.15-3.15.2 as a component of SUSE Manager Proxy Module 4.0 spacewalk-check-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 spacewalk-client-setup-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 spacewalk-client-tools-4.0.12-3.13.2 as a component of SUSE Manager Proxy Module 4.0 supportutils-plugin-susemanager-client-4.0.3-3.3.2 as a component of SUSE Manager Proxy Module 4.0 supportutils-plugin-susemanager-proxy-4.0.3-3.3.2 as a component of SUSE Manager Proxy Module 4.0 branch-network-formula-0.1.1580471316.1839544-3.10.2 as a component of SUSE Manager Server Module 4.0 image-sync-formula-0.1.1579102150.4716559-3.11.2 as a component of SUSE Manager Server Module 4.0 mgr-osa-dispatcher-4.0.11-3.9.2 as a component of SUSE Manager Server Module 4.0 patterns-suma_retail-4.0-9.10.2 as a component of SUSE Manager Server Module 4.0 patterns-suma_server-4.0-9.10.2 as a component of SUSE Manager Server Module 4.0 prometheus-formula-0.1-4.7.2 as a component of SUSE Manager Server Module 4.0 pxe-default-image-sle15-4.0.1-20200305173027 as a component of SUSE Manager Server Module 4.0 pxe-formula-0.1.1580384994.6076a7e-3.11.2 as a component of SUSE Manager Server Module 4.0 py26-compat-salt-2016.11.10-10.11.2 as a component of SUSE Manager Server Module 4.0 python3-mgr-osa-common-4.0.11-3.9.2 as a component of SUSE Manager Server Module 4.0 python3-mgr-osa-dispatcher-4.0.11-3.9.2 as a component of SUSE Manager Server Module 4.0 python3-spacewalk-backend-libs-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 python3-spacewalk-certs-tools-4.0.15-3.15.2 as a component of SUSE Manager Server Module 4.0 python3-spacewalk-client-tools-4.0.12-3.13.2 as a component of SUSE Manager Server Module 4.0 python3-susemanager-retail-1.0.1580471316.1839544-3.13.2 as a component of SUSE Manager Server Module 4.0 redstone-xmlrpc-1.1_20071120-0.11.3.2 as a component of SUSE Manager Server Module 4.0 salt-netapi-client-0.17.0-4.3.2 as a component of SUSE Manager Server Module 4.0 spacecmd-4.0.18-3.13.2 as a component of SUSE Manager Server Module 4.0 spacewalk-admin-4.0.9-3.6.2 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-app-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-applet-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-common-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-config-files-tool-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-iss-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-iss-export-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-package-push-server-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-server-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-sql-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-sql-postgresql-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-tools-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-xml-export-libs-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-backend-xmlrpc-4.0.30-3.23.3 as a component of SUSE Manager Server Module 4.0 spacewalk-base-4.0.19-3.18.3 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-4.0.19-3.18.3 as a component of SUSE Manager Server Module 4.0 spacewalk-base-minimal-config-4.0.19-3.18.3 as a component of SUSE Manager Server Module 4.0 spacewalk-certs-tools-4.0.15-3.15.2 as a component of SUSE Manager Server Module 4.0 spacewalk-client-tools-4.0.12-3.13.2 as a component of SUSE Manager Server Module 4.0 spacewalk-html-4.0.19-3.18.3 as a component of SUSE Manager Server Module 4.0 spacewalk-java-4.0.31-3.23.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-config-4.0.31-3.23.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-lib-4.0.31-3.23.1 as a component of SUSE Manager Server Module 4.0 spacewalk-java-postgresql-4.0.31-3.23.1 as a component of SUSE Manager Server Module 4.0 spacewalk-search-4.0.9-3.11.2 as a component of SUSE Manager Server Module 4.0 spacewalk-setup-4.0.13-3.11.1 as a component of SUSE Manager Server Module 4.0 spacewalk-taskomatic-4.0.31-3.23.1 as a component of SUSE Manager Server Module 4.0 spacewalk-utils-4.0.16-3.15.2 as a component of SUSE Manager Server Module 4.0 subscription-matcher-0.25-3.3.2 as a component of SUSE Manager Server Module 4.0 susemanager-4.0.22-3.20.3 as a component of SUSE Manager Server Module 4.0 susemanager-doc-indexes-4.0-10.18.2 as a component of SUSE Manager Server Module 4.0 susemanager-docs_en-4.0-10.18.2 as a component of SUSE Manager Server Module 4.0 susemanager-docs_en-pdf-4.0-10.18.2 as a component of SUSE Manager Server Module 4.0 susemanager-retail-tools-1.0.1580471316.1839544-3.13.2 as a component of SUSE Manager Server Module 4.0 susemanager-schema-4.0.18-3.17.2 as a component of SUSE Manager Server Module 4.0 susemanager-sls-4.0.24-3.17.2 as a component of SUSE Manager Server Module 4.0 susemanager-sync-data-4.0.16-3.15.2 as a component of SUSE Manager Server Module 4.0 susemanager-tools-4.0.22-3.20.3 as a component of SUSE Manager Server Module 4.0 susemanager-web-libs-4.0.19-3.18.3 as a component of SUSE Manager Server Module 4.0 system-lock-formula-0.2-4.5.1 as a component of SUSE Manager Server Module 4.0 virtualization-host-formula-0.2-4.3.2 as a component of SUSE Manager Server Module 4.0 The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS). It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString() backslash-escapes all forward slashes in regular expressions. If serialized data of regular expression objects are used in an environment other than Node.js, it is affected by this vulnerability. CVE-2019-16769 SUSE Manager Proxy Module 4.0:mgr-osad-4.0.11-3.9.2 SUSE Manager Proxy Module 4.0:patterns-suma_proxy-4.0-9.10.2 SUSE Manager Proxy Module 4.0:python3-mgr-osa-common-4.0.11-3.9.2 SUSE Manager Proxy Module 4.0:python3-mgr-osad-4.0.11-3.9.2 SUSE Manager Proxy Module 4.0:python3-spacewalk-backend-libs-4.0.30-3.23.3 SUSE Manager Proxy Module 4.0:python3-spacewalk-certs-tools-4.0.15-3.15.2 SUSE Manager Proxy Module 4.0:python3-spacewalk-check-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:python3-spacewalk-client-setup-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:python3-spacewalk-client-tools-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:spacecmd-4.0.18-3.13.2 SUSE Manager Proxy Module 4.0:spacewalk-backend-4.0.30-3.23.3 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-4.0.19-3.18.3 SUSE Manager Proxy Module 4.0:spacewalk-base-minimal-config-4.0.19-3.18.3 SUSE Manager Proxy Module 4.0:spacewalk-certs-tools-4.0.15-3.15.2 SUSE Manager Proxy Module 4.0:spacewalk-check-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:spacewalk-client-setup-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:spacewalk-client-tools-4.0.12-3.13.2 SUSE Manager Proxy Module 4.0:supportutils-plugin-susemanager-client-4.0.3-3.3.2 SUSE Manager Proxy Module 4.0:supportutils-plugin-susemanager-proxy-4.0.3-3.3.2 SUSE Manager Server Module 4.0:branch-network-formula-0.1.1580471316.1839544-3.10.2 SUSE Manager Server Module 4.0:image-sync-formula-0.1.1579102150.4716559-3.11.2 SUSE Manager Server Module 4.0:mgr-osa-dispatcher-4.0.11-3.9.2 SUSE Manager Server Module 4.0:patterns-suma_retail-4.0-9.10.2 SUSE Manager Server Module 4.0:patterns-suma_server-4.0-9.10.2 SUSE Manager Server Module 4.0:prometheus-formula-0.1-4.7.2 SUSE Manager Server Module 4.0:pxe-default-image-sle15-4.0.1-20200305173027 SUSE Manager Server Module 4.0:pxe-formula-0.1.1580384994.6076a7e-3.11.2 SUSE Manager Server Module 4.0:py26-compat-salt-2016.11.10-10.11.2 SUSE Manager Server Module 4.0:python3-mgr-osa-common-4.0.11-3.9.2 SUSE Manager Server Module 4.0:python3-mgr-osa-dispatcher-4.0.11-3.9.2 SUSE Manager Server Module 4.0:python3-spacewalk-backend-libs-4.0.30-3.23.3 SUSE Manager Server Module 4.0:python3-spacewalk-certs-tools-4.0.15-3.15.2 SUSE Manager Server Module 4.0:python3-spacewalk-client-tools-4.0.12-3.13.2 SUSE Manager Server Module 4.0:python3-susemanager-retail-1.0.1580471316.1839544-3.13.2 SUSE Manager Server Module 4.0:redstone-xmlrpc-1.1_20071120-0.11.3.2 SUSE Manager Server Module 4.0:salt-netapi-client-0.17.0-4.3.2 SUSE Manager Server Module 4.0:spacecmd-4.0.18-3.13.2 SUSE Manager Server Module 4.0:spacewalk-admin-4.0.9-3.6.2 SUSE Manager Server Module 4.0:spacewalk-backend-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-app-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-applet-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-common-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-config-files-tool-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-iss-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-iss-export-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-package-push-server-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-server-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-sql-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-sql-postgresql-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-tools-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-xml-export-libs-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-backend-xmlrpc-4.0.30-3.23.3 SUSE Manager Server Module 4.0:spacewalk-base-4.0.19-3.18.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-4.0.19-3.18.3 SUSE Manager Server Module 4.0:spacewalk-base-minimal-config-4.0.19-3.18.3 SUSE Manager Server Module 4.0:spacewalk-certs-tools-4.0.15-3.15.2 SUSE Manager Server Module 4.0:spacewalk-client-tools-4.0.12-3.13.2 SUSE Manager Server Module 4.0:spacewalk-html-4.0.19-3.18.3 SUSE Manager Server Module 4.0:spacewalk-java-4.0.31-3.23.1 SUSE Manager Server Module 4.0:spacewalk-java-config-4.0.31-3.23.1 SUSE Manager Server Module 4.0:spacewalk-java-lib-4.0.31-3.23.1 SUSE Manager Server Module 4.0:spacewalk-java-postgresql-4.0.31-3.23.1 SUSE Manager Server Module 4.0:spacewalk-search-4.0.9-3.11.2 SUSE Manager Server Module 4.0:spacewalk-setup-4.0.13-3.11.1 SUSE Manager Server Module 4.0:spacewalk-taskomatic-4.0.31-3.23.1 SUSE Manager Server Module 4.0:spacewalk-utils-4.0.16-3.15.2 SUSE Manager Server Module 4.0:subscription-matcher-0.25-3.3.2 SUSE Manager Server Module 4.0:susemanager-4.0.22-3.20.3 SUSE Manager Server Module 4.0:susemanager-doc-indexes-4.0-10.18.2 SUSE Manager Server Module 4.0:susemanager-docs_en-4.0-10.18.2 SUSE Manager Server Module 4.0:susemanager-docs_en-pdf-4.0-10.18.2 SUSE Manager Server Module 4.0:susemanager-retail-tools-1.0.1580471316.1839544-3.13.2 SUSE Manager Server Module 4.0:susemanager-schema-4.0.18-3.17.2 SUSE Manager Server Module 4.0:susemanager-sls-4.0.24-3.17.2 SUSE Manager Server Module 4.0:susemanager-sync-data-4.0.16-3.15.2 SUSE Manager Server Module 4.0:susemanager-tools-4.0.22-3.20.3 SUSE Manager Server Module 4.0:susemanager-web-libs-4.0.19-3.18.3 SUSE Manager Server Module 4.0:system-lock-formula-0.2-4.5.1 SUSE Manager Server Module 4.0:virtualization-host-formula-0.2-4.3.2 moderate 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N