seroval vulnerabilities (TuxCare)
6 vulnerabilities.
-
serovalTuxCare Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length 7.5 High -
serovalTuxCare Seroval: Script injection through RegExp sources in serialized output 4.7 Medium -
serovalTuxCare Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) 7.5 High -
serovalTuxCare Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check 7.3 High -
serovalTuxCare Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) 9.8 Critical -
serovalTuxCare Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization 7.5 High