SE
Product
seroval
13
CVEs
0
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 3High 8Medium 2Low 0
Watch
Add seroval to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104846 | 9.8 | Oct 2 | Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) Affected: >= 0.12.0, < 1.6.2 |
| CVE-2026-59940 | 9.8 | Aug 18 | Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization Affected: < 1.5.3 |
| CVE-2026-23736 | 9.8 | Jan 21 | seroval Affected by Prototype Pollution via JSON Deserialization Affected: < 1.4.1 |
Showing 3