serialize-javascript (<= 7.0.2) contains a code injection vulnerability (incomplete fix for CVE-2020-7660). Attackers who control the input to serialize() can inject malicious JavaScript via ...