Skip to content
OpenAdvisories

Package · npm

seroval

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-116583

    Seroval: Code injection through a typed array's own constructor property

    Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive a typed array's constructor name from a property on the value that can be replace…

    lxsmnsyc seroval seroval npm
  • Medium 4.7
    CVE-2026-116582

    Seroval: Script injection through RegExp sources in serialized output

    Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.0.0 and from 1.5.5 until 1.6.10, the JavaScript-output APIs serialize a RegExp source containing a less-than character without th…

    lxsmnsyc seroval seroval npm