Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

seroval — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in seroval, with AI-generated Chinese analysis, references, and POCs.

Vendor: lxsmnsyc

CVE ID Title CVSS Severity Published
CVE-2026-104846 Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940) CWE-843 9.8 Critical 2026-10-02
CVE-2026-104845 Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization CWE-770 7.5 High 2026-10-02
CVE-2026-59940 Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization CWE-502 9.8 Critical 2026-08-18
CVE-2026-24006 Seroval affected by Denial of Service via Deeply Nested Objects CWE-770 7.5 High 2026-01-22
CVE-2026-23957 seroval is vulnerable to Denial of Service via array serialization CWE-770 7.5 High 2026-01-22
CVE-2026-23956 seroval affected by Denial of Service via RegExp serialization CWE-1333 7.5 High 2026-01-22
CVE-2026-23737 seroval Affected by Remote Code Execution via JSON Deserialization CWE-502 7.5 High 2026-01-21
CVE-2026-23736 seroval Affected by Prototype Pollution via JSON Deserialization CWE-1321 7.3 High 2026-01-21

All 8 known CVE vulnerabilities affecting seroval with full Chinese analysis, references, and POCs where available.