Vulnerabilities
Last updated 3 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw) | Critical 9.8 | 9 hours ago | 8 hours ago |
|
|
Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization | High Risk 7.5 | 9 hours ago | 9 hours ago |
|
|
seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization | Critical 9.8 | 2 months ago | 2 months ago |
|
|
seroval affected by Denial of Service via RegExp serialization | High Risk 7.5 | 8 months ago | 4 months ago |
|
|
seroval Affected by Prototype Pollution via JSON Deserialization | High Risk 7.3 | 8 months ago | 8 months ago |
|
|
seroval Affected by Remote Code Execution via JSON Deserialization | High Risk 7.5 | 8 months ago | 8 months ago |
|
|
Seroval affected by Denial of Service via Array serialization | High Risk 7.5 | 8 months ago | 8 months ago |
|
|
Seroval affected by Denial of Service via Deeply Nested Objects | High Risk 7.5 | 8 months ago | 8 months ago |
Page 1