GHSA-3rxj-6cgf-8cfw
High · 7.5CVSS
7.5
EPSS
—
Published
Jan 21, 2026
CISA due date
—
The record
seroval Affected by Remote Code Execution via JSON Deserialization
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | seroval | 0 | 1.4.1 |
Related vulnerabilities
- CVE-2026-23737 seroval facilitates JS value stringification, including complex structures beyond… Same vulnerability
- GHSA-3j22-8qj3-26mx Seroval affected by Denial of Service via Deeply Nested Objects Also affects seroval
- CVE-2026-24006 Seroval facilitates JS value stringification, including complex structures beyond… Also affects seroval
- CVE-2026-23956 seroval facilitates JS value stringification, including complex structures beyond… Also affects seroval
- CVE-2026-23957 seroval facilitates JS value stringification, including complex structures beyond… Also affects seroval
- CVE-2026-23736 seroval facilitates JS value stringification, including complex structures beyond… Also affects seroval
- GHSA-66fc-rw6m-c2q6 Seroval affected by Denial of Service via Array serialization Also affects seroval
- GHSA-hx9m-jf43-8ffr seroval affected by Denial of Service via RegExp serialization Also affects seroval