unjs — Vulnerabilities & Security Advisories 5

Unjs is a JavaScript utility library primarily used for data manipulation and DOM operations in web applications. Historically, it has been associated with multiple remote code execution (RCE) vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, often stemming from improper input validation and insecure deserialization. The library's security posture has been compromised by several critical vulnerabilities, including one that allowed attackers to execute arbitrary code through crafted payloads. With five CVEs recorded, unjs has demonstrated recurring security weaknesses in its core functionality, particularly in handling untrusted data and maintaining proper access controls, making it a potential risk in environments requiring robust security measures.