TI-2026-19109 CVE-2026-23736 · GHSA-hj76-42vx-jwp4
seroval Affected by Prototype Pollution via JSON Deserialization
Priority MEDIUM 48
seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.
lxsmnsyc
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
lxsmnsyc records in CISA KEVNo lxsmnsyc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Seroval · all components
TI-2026-19298 CVE-2026-23956 · GHSA-hx9m-jf43-8ffr
seroval affected by Denial of Service via RegExp serialization
Priority MEDIUM 40
seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.
TI-2026-19345 CVE-2026-24006 · GHSA-3j22-8qj3-26mx
Seroval affected by Denial of Service via Deeply Nested Objects
Priority LOW 39
Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.
TI-2026-19299 CVE-2026-23957 · GHSA-66fc-rw6m-c2q6
seroval is vulnerable to Denial of Service via array serialization
Priority LOW 39
seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.
TI-2026-19110 CVE-2026-23737 · GHSA-3rxj-6cgf-8cfw
seroval Affected by Remote Code Execution via JSON Deserialization
Priority LOW 36
seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.