A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing an attacker to inject malicious code. This code could be executed when deserialized by a web browser, causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data is sent to web clients, potentially compromising the security of the website or web application using this package.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2769 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous security and bug fixes. Space precludes documenting all of these     changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on     the most significant of these changes:

    https://docs.redhat.com/en/documentation/red_hat_ceph_storage/7/html/7.1_release_notes

    ==========================================     IMPORTANT:
    The Red Hat Ceph Storage team has migrated our defect tracking from Bugzilla to an internal Jira system.
    Bug fixes and CVE information that was previously listed in the errata releases are now listed in the     Release Notes.

    During the migration period, some defect details might still appear temporarily in the Errata. However,     the release notes contain the most current and authoritative information, including the complete list of     fixes and security updates.

    Refer to the release notes going forward for the latest and most accurate fix and CVE information.
    ==========================================

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:1536 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform     that combines the most stable version of the Ceph storage system with a     Ceph management platform, deployment utilities, and support services.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:21068 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages includes numerous bug fixes. Space precludes documenting all of these changes in this     advisory. Users are directed to the Red Hat Ceph Storage Release Notes for information on the most     significant of these changes:

    https://docs.redhat.com/en/documentation/red_hat_ceph_storage/8/html/8.1_release_notes

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript     module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing     an attacker to inject malicious code. This code could be executed when deserialized by a web browser,     causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data     is sent to web clients, potentially compromising the security of the website or web application using this     package. (CVE-2024-11831)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript
    module does not properly sanitize certain inputs, such as regex or other JavaScript object types, allowing
    an attacker to inject malicious code. This code could be executed when deserialized by a web browser,
    causing Cross-site scripting (XSS) attacks. This issue is critical in environments where serialized data
    is sent to web clients, potentially compromising the security of the website or web application using this
    package. (CVE-2024-11831)

ID	Name	Product	Family	Severity
299273	RHEL 8 / 9 : Red Hat Ceph Storage 7.1 (RHSA-2026:2769)	Nessus	Red Hat Local Security Checks	high
297118	RHEL 10 / 9 : Red Hat Ceph Storage 9.0 Security and Enhancement update (Moderate) (RHSA-2026:1536)	Nessus	Red Hat Local Security Checks	high
275157	RHEL 9 : Red Hat Ceph Storage 8.1 update (Important) (RHSA-2025:21068)	Nessus	Red Hat Local Security Checks	medium
247227	Linux Distros Unpatched Vulnerability : CVE-2024-11831	Nessus	Misc.	medium
420868	SCA: security update for serialize-javascript (GHSA-76p7-773f-r4q5)	Tenable Cloud Security	SCA Checks	medium
420868	SCA: security update for serialize-javascript (GHSA-76p7-773f-r4q5)	Tenable Self-Hosted Container Security	SCA Checks	medium

Detections

Analytics

CVE-2024-11831

medium

Tenable Plugins

high

high

medium

medium

medium

medium