Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
ExploitGrid Daily Digest 🚨 Top Exploits: CVE-2025-55182 (CVSS: 10) Meta CVE-2026-100886 (CVSS: 10) Seetong CVE-2026-85706 (CVSS: 10) gitlab CVE-2026-38526 (CVSS: 9.9) CVE-2017-5941 (CVSS: 9.8) ..🧵👇
💀 CRITICAL Exploits Trending ├ CVE-2025-55182 — Meta/React · "React2Shell" PoC live ├ CVE-2026-100886 — Seetong TS81xx · RCE PoC live ├ CVE-2026-85706 — GitLab · PoC live └ CVE-2026-38526 (9.9) · CVE-2017-5941 (9.8) · PoC live
[EXPLOIT] CVE-2017-5941 [CRITICAL/PoC] CVSS: 9.8 scenario-c-block 🔗 https://exploitgrid.net/exploits/d731ff26-00cc-4d1c-a503-5333fa161969
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | node-serialize_project | node-serialize | - | node.js | - |