seroval-plugins vulnerabilities (TuxCare)

2 vulnerabilities.

• seroval-plugins TuxCare Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) CVE-2026-104846 Fix available 9.8 CriticalOctober 2, 2026
• seroval-plugins TuxCare Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization CVE-2026-104845 Fix available 7.5 HighOctober 2, 2026