Root has patched CVE-2020-7660 in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available.
{ "distro": "npm", "distro_version": "", "source": "Root", "severity": "HIGH" }
"1.9.1"
[ "1.9.1-root.io.1", "1.9.1-root.io.2" ]
true
"root.io.2"
2.0
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2020-7660.json"
[ "1.9.1-aikido.1", "1.9.1-aikido.2" ]
"aikido.2"