HIGH7.5npm
GHSA-3j22-8qj3-26mx· CVE-2026-24006Seroval affected by Denial of Service via Deeply Nested Objects
Modified: 2/3/2026
package
npm/seroval
pkg:npm/seroval
HIGH7.5npm
GHSA-3rxj-6cgf-8cfw· CVE-2026-23737seroval Affected by Remote Code Execution via JSON Deserialization
Modified: 2/3/2026
HIGH7.5npm
GHSA-66fc-rw6m-c2q6· CVE-2026-23957Seroval affected by Denial of Service via Array serialization
Modified: 2/3/2026
HIGH7.3npm
GHSA-hj76-42vx-jwp4· CVE-2026-23736seroval Affected by Prototype Pollution via JSON Deserialization
Modified: 2/3/2026
HIGH7.5npm
GHSA-hx9m-jf43-8ffr· CVE-2026-23956seroval affected by Denial of Service via RegExp serialization
Modified: 5/20/2026
CRITICAL9.8npm
GHSA-mv8w-475r-vwqw· CVE-2026-59940seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization
Modified: 7/24/2026