Vulnerabilities

TI-2026-19345 CVE-2026-24006 · GHSA-3j22-8qj3-26mx

Seroval affected by Denial of Service via Deeply Nested Objects

LOW 39

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00439 Published 2026-01-22 Fixed in 1.4.1 CWE-770

TI-2026-19299 CVE-2026-23957 · GHSA-66fc-rw6m-c2q6

LOW 39

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00439 Published 2026-01-22 Fixed in 1.4.1 CWE-770

TI-2026-19298 CVE-2026-23956 · GHSA-hx9m-jf43-8ffr

MEDIUM 40

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00534 Published 2026-01-22 Fixed in 1.4.1 CWE-1333

TI-2026-19110 CVE-2026-23737 · GHSA-3rxj-6cgf-8cfw

LOW 36

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00582 Published 2026-01-21 Fixed in 1.4.1 CWE-502

TI-2026-19109 CVE-2026-23736 · GHSA-hj76-42vx-jwp4

MEDIUM 48

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00302 Published 2026-01-21 Fixed in 1.4.1 CWE-1321