seroval vulnerabilities

CVEs whose affected-version data names the seroval package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-59940Critical· 9.8

1mo ago

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON() allows attacker-controlled JSON Promise control nodes to operate on values from the general…

▾ Midnightseroval · serovalEPSS 0.61%via NVD