seroval vulnerabilities (npm)
13 vulnerabilities.
-
serovalnpm Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length 7.5 High -
serovalnpm Seroval: Code injection through a typed array's own constructor property 5.3 Medium -
serovalnpm Seroval: Script injection through RegExp sources in serialized output 4.7 Medium -
serovalnpm Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS) 7.5 High -
serovalnpm Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check 7.3 High -
serovalnpm Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) 9.8 Critical -
serovalnpm Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization 7.5 High -
serovalnpm Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization 9.8 Critical -
serovalnpm Seroval affected by Denial of Service via Deeply Nested Objects 7.5 High -
serovalnpm seroval is vulnerable to Denial of Service via array serialization 7.5 High -
serovalnpm seroval affected by Denial of Service via RegExp serialization 7.5 High -
serovalnpm seroval Affected by Remote Code Execution via JSON Deserialization 7.5 High -
serovalnpm seroval Affected by Prototype Pollution via JSON Deserialization 7.3 High