{"id":6267064,"name":"seroval","ecosystem":"npm","description":"Stringify JS values","homepage":"https://seroval.vercel.app","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/lxsmnsyc/seroval","keywords_array":["pridepack","solid-js","tanstack","serialization"],"namespace":null,"versions_count":95,"first_release_published_at":"2023-02-06T06:30:13.111Z","latest_release_published_at":"2026-10-24T12:22:34.910Z","latest_release_number":"1.7.2","latest_published_release_number":"1.7.2","last_synced_at":"2026-10-28T09:17:19.507Z","created_at":"2023-02-06T07:03:28.594Z","updated_at":"2026-10-29T07:18:10.107Z","registry_url":"https://www.npmjs.com/package/seroval","install_command":"npm install seroval","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.7.2"},"contentPolicy":null},"repo_metadata":{"id":65713260,"uuid":"597809972","full_name":"lxsmnsyc/seroval","owner":"lxsmnsyc","description":"Stringify JS values","archived":false,"fork":false,"pushed_at":"2026-10-21T16:48:33.000Z","size":5743,"stargazers_count":733,"open_issues_count":7,"forks_count":18,"subscribers_count":4,"default_branch":"main","last_synced_at":"2026-10-22T04:43:51.712Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://seroval.vercel.app","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lxsmnsyc.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"lxsmnsyc"}},"created_at":"2023-02-05T17:52:28.000Z","updated_at":"2026-10-21T15:43:41.000Z","dependencies_parsed_at":"2026-09-30T07:23:28.539Z","dependency_job_id":null,"html_url":"https://github.com/lxsmnsyc/seroval","commit_stats":{"total_commits":803,"total_committers":3,"mean_commits":267.6666666666667,"dds":0.00249066002490661,"last_synced_commit":"93790004344730f0b413b069182a65727d890bf9"},"previous_names":[],"tags_count":75,"template":false,"template_full_name":null,"purl":"pkg:github/lxsmnsyc/seroval","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lxsmnsyc","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":345082042,"owners_count":38472904,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-22T02:00:06.372Z","response_time":122,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"lxsmnsyc","name":"Alexis H. Munsayac","uuid":"4783372","kind":"user","description":"Speed determines the winner\r\n\r\n@solidjs ","email":"alexis.munsayac@gmail.com","website":"lxsmnsyc.now.sh","location":"Philippines","twitter":"lxsmnsyc","company":"@solidjs","icon_url":"https://avatars.githubusercontent.com/u/4783372?u=d2703898b986d28943660920e134c8df47e676da\u0026v=4","repositories_count":283,"last_synced_at":"2026-10-19T08:40:54.643Z","metadata":{"has_sponsors_listing":true,"funding":{"github":"lxsmnsyc"}},"html_url":"https://github.com/lxsmnsyc","funding_links":["https://github.com/sponsors/lxsmnsyc"],"total_stars":4455,"followers":611,"following":198,"created_at":"2022-11-05T15:29:40.085Z","updated_at":"2026-10-19T08:40:54.660Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lxsmnsyc","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lxsmnsyc/repositories"},"tags":[{"name":"v1.5.5","sha":"e37096b6b226022a30a5034397e20a62f8585b99","kind":"commit","published_at":"2026-07-08T17:04:18.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.5.5","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.5.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.5.5/manifests"},{"name":"1.5.0","sha":"33bb0854fdf81c947e0c597419b2789e129182f2","kind":"tag","published_at":"2026-01-31T12:58:58.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/1.5.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/1.5.0/manifests"},{"name":"1.4.2","sha":"ce9408ebc87312fcad345a73c172212f2a798060","kind":"tag","published_at":"2026-01-31T12:58:50.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/1.4.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/1.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@1.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/1.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/1.4.2/manifests"},{"name":"v1.3.3","sha":"5ce4c4c964d8c9f521210eba4ce9ec6fab9f14af","kind":"tag","published_at":"2025-09-02T09:53:30.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.3.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.3/manifests"},{"name":"v1.3.2","sha":"c1e47dd1233aaec1d4fae82c5776c31d5850def9","kind":"tag","published_at":"2025-05-24T01:50:38.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.3.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.2/manifests"},{"name":"v1.3.1","sha":"cc1352acbff42b3e9078d7007ce2e0ada9392dc0","kind":"tag","published_at":"2025-05-11T07:29:43.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.3.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.1/manifests"},{"name":"v1.3.0","sha":"d068e79701dd00e5e0fc969adc9f1be36df95c33","kind":"tag","published_at":"2025-05-06T16:02:11.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.3.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.3.0/manifests"},{"name":"v1.2.1","sha":"c90be6d96271c63791fd4627672813f3d74fe2eb","kind":"tag","published_at":"2025-02-01T07:39:17.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.2.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"8554d153be3359ef6fc0b6179d0d702c17f50c77","kind":"tag","published_at":"2025-01-07T12:09:40.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.2.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"3769b41ff1bc1ef0c58d06b8f8dd0ccf012083e2","kind":"tag","published_at":"2024-07-30T16:07:14.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.1.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"1746c7b2d937d7b1a89e4ead83befd79087dc167","kind":"tag","published_at":"2024-07-14T06:10:48.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.1.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.1.0/manifests"},{"name":"v1.0.8","sha":"e091f1e559a44bdd8dab715753a1c15c073d59e5","kind":"tag","published_at":"2024-07-14T06:07:40.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.8","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.8/manifests"},{"name":"v1.0.7","sha":"da4887ed6acb7c0c6589d35da162a51fed2c6532","kind":"tag","published_at":"2024-05-16T03:34:59.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.7","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.7/manifests"},{"name":"v1.0.6","sha":"06f7397926055d9b74f88ad708bfe7009a097a22","kind":"tag","published_at":"2024-05-16T03:23:12.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.6","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.6/manifests"},{"name":"v1.0.5","sha":"63003d77889b06b73bab0365d296bcdd029219fb","kind":"tag","published_at":"2024-03-10T16:56:16.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.5","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"cf01159c7c1cb1c527604236d5a2e0120cf3bd88","kind":"tag","published_at":"2024-01-11T08:28:04.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.4","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"08e62b976bedcb016b64907c366410aa165968fc","kind":"tag","published_at":"2024-01-06T07:26:03.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"50a746cdc005fa54b79a9e1658587b493c5704d3","kind":"tag","published_at":"2023-12-27T16:32:06.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"e6f5e33790a537a6ee60e57a7e1daf5eb6079516","kind":"tag","published_at":"2023-12-12T04:27:03.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"db187214170c2bf94312e28717031ec9dec3b999","kind":"tag","published_at":"2023-12-12T04:06:12.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v1.0.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v1.0.0/manifests"},{"name":"v0.15.1","sha":"4c597a39c75fc9918508dc7ceeaeaad51f84ac21","kind":"tag","published_at":"2023-11-29T12:52:45.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.15.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.15.1/manifests"},{"name":"v0.15.0","sha":"0f5b9e1e9fef04bf9a9e6f142950f1167e17a424","kind":"tag","published_at":"2023-11-29T12:39:08.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.15.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.15.0/manifests"},{"name":"v0.14.1","sha":"6c22472b58ec0dc367bf91bde033da0e9d8706fa","kind":"tag","published_at":"2023-11-22T08:24:34.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.14.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.14.1/manifests"},{"name":"v0.14.0","sha":"0fb114d1b7cd06d9fb33e895c5bb143a73d9f457","kind":"tag","published_at":"2023-11-22T08:06:02.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.14.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.14.0/manifests"},{"name":"v0.13.2","sha":"3a74cd6a4fe3fd9f0af3c337a0e19032235a9740","kind":"tag","published_at":"2023-11-21T09:54:26.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.13.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.13.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.13.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.2/manifests"},{"name":"v0.13.1","sha":"d977f4e777e01d1c449558c2d1b13d9e04db077c","kind":"tag","published_at":"2023-11-21T06:50:45.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.13.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.1/manifests"},{"name":"v0.13.0","sha":"7585fad45f057f4481647247ca617cb94768c5d9","kind":"tag","published_at":"2023-11-18T14:55:13.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.13.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.13.0/manifests"},{"name":"v0.12.4","sha":"4040423d3d896c86679f5f129f8a3309752c9c7a","kind":"tag","published_at":"2023-11-15T08:26:47.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.12.4","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.12.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.12.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.4/manifests"},{"name":"v0.12.3","sha":"d808e3d6798faca42fde0ae4c9f0e4e067f7e945","kind":"tag","published_at":"2023-11-02T17:18:42.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.12.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.12.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.12.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.3/manifests"},{"name":"v0.12.2","sha":"41c5dc532b6c4cc1c2ced46ea31879545cc67ec6","kind":"tag","published_at":"2023-11-02T17:12:36.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.12.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.2/manifests"},{"name":"v0.12.1","sha":"497e434530bf4368ec569fdb617c3549b4df6256","kind":"tag","published_at":"2023-11-02T05:05:33.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.12.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.1/manifests"},{"name":"v0.12.0","sha":"48c2471aa7c00af0409a9bf7313a6d135055cab6","kind":"tag","published_at":"2023-10-19T06:10:33.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.12.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.12.0/manifests"},{"name":"v0.11.6","sha":"5eacc5d6364759e592c72e1e49ab0f2a84375eea","kind":"tag","published_at":"2023-10-18T05:12:07.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.6","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.6/manifests"},{"name":"v0.11.5","sha":"342abd2cfe1889f1e6dc8cbdd44b36def8aeaaef","kind":"tag","published_at":"2023-10-18T04:57:22.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.5","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.5/manifests"},{"name":"v0.11.4","sha":"ebab96e090474e9add7167f648d4b6f0708acb42","kind":"tag","published_at":"2023-10-18T04:14:11.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.4","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.4/manifests"},{"name":"v0.11.3","sha":"9cd59c8ba0b787341b8e7fe4f3fe44a03f608324","kind":"tag","published_at":"2023-10-13T11:43:38.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.3/manifests"},{"name":"v0.11.2","sha":"173cf11aa7ed25209055e127bc3831b9fef52e95","kind":"tag","published_at":"2023-10-13T11:28:28.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.2/manifests"},{"name":"v0.11.1","sha":"745467fa453ee90169f50bf543f5a8649699982e","kind":"tag","published_at":"2023-10-12T03:49:09.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.1/manifests"},{"name":"v0.11.0","sha":"1104f3349a30b4bcd51cf67f6dff49d3e7e52dce","kind":"tag","published_at":"2023-10-11T08:35:55.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.11.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.11.0/manifests"},{"name":"v0.10.4","sha":"62d11e2cac667d2fd13d4ac1fb55d9e448b9ba0f","kind":"tag","published_at":"2023-09-28T09:21:43.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.10.4","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.10.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.10.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.4/manifests"},{"name":"v0.10.3","sha":"97e6e1efd223ad1fb56c3105c42f1259654041b6","kind":"tag","published_at":"2023-09-28T08:53:58.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.10.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.10.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.10.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.3/manifests"},{"name":"v0.10.2","sha":"a093a32769a5653f1598d409b404ecae95d2b2f5","kind":"tag","published_at":"2023-09-26T16:38:59.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.10.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.2/manifests"},{"name":"v0.10.1","sha":"aa589c20369bfbeb28d7a3d9ab0e86ed92205195","kind":"tag","published_at":"2023-09-18T02:29:23.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.10.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"2b0ce43b98b92a264ea5bf3bd2b47ba3628a2c3f","kind":"tag","published_at":"2023-09-18T02:24:47.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.10.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.10.0/manifests"},{"name":"v0.9.0","sha":"a3bfdc3ac2246b5b067f67af1f10d7a416bfed5f","kind":"tag","published_at":"2023-07-07T09:12:25.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.9.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.9.0/manifests"},{"name":"v0.8.0","sha":"f7fe3305e0295499989d9f675ff54f9305db23b0","kind":"tag","published_at":"2023-05-03T09:48:37.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.8.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"187cbd91a44f5e88c6a87288d9ea440ddbaf5be0","kind":"tag","published_at":"2023-04-09T14:24:12.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.7.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.7.0/manifests"},{"name":"v0.6.0","sha":"1d6e69079251612c6fc486e8517e225690363442","kind":"tag","published_at":"2023-04-08T13:24:30.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.6.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.6.0/manifests"},{"name":"v0.5.1","sha":"2154c039056b24f706dbb1c2006acd99383e9305","kind":"tag","published_at":"2023-03-22T03:01:38.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.5.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"7c2e32b409df6bc01b5d5b38fdd3f9980a8b4984","kind":"tag","published_at":"2023-03-17T06:04:34.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.5.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.5.0/manifests"},{"name":"v0.4.1","sha":"a3cfb8eae6e1f9a2d2939b03c5ae88fa24c738f8","kind":"tag","published_at":"2023-03-16T13:49:38.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"4767da3b4b6397d6830978b6f4d0f014d2115479","kind":"tag","published_at":"2023-03-16T13:07:24.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0/manifests"},{"name":"v0.4.0-alpha.18","sha":"e4f5b83541b7fa184ec20852de3b98bd5bc72d68","kind":"tag","published_at":"2023-03-16T12:31:56.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.18","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.18","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.18","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.18/manifests"},{"name":"v0.4.0-alpha.17","sha":"8996bd95e93cfc4d099aa040117916b326faacad","kind":"tag","published_at":"2023-03-16T06:27:10.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.17","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.17/manifests"},{"name":"v0.4.0-alpha.16","sha":"ebed12239c5985c00e66f984da6b4a48d7519706","kind":"tag","published_at":"2023-03-16T06:10:53.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.16","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.16/manifests"},{"name":"v0.4.0-alpha.15","sha":"a9751ea8b416dc40622219d6d0fc4fba508fec7d","kind":"tag","published_at":"2023-03-16T04:15:28.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.15","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.15/manifests"},{"name":"v0.4.0-alpha.14","sha":"7a287f3985c45ba331913f7633ca1ebf31c502ac","kind":"tag","published_at":"2023-03-15T16:57:33.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.14","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.14/manifests"},{"name":"v0.4.0-alpha.13","sha":"3f71e898ce27170bade38120eddc9afe96390498","kind":"tag","published_at":"2023-03-15T16:03:11.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.13","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.13/manifests"},{"name":"v0.4.0-alpha.12","sha":"1154b39e7437e0f6bf9e1c3e814917bd308a2154","kind":"tag","published_at":"2023-03-15T15:05:00.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.12","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.12/manifests"},{"name":"v0.4.0-alpha.11","sha":"743b4f2421f9c15c39b89a7dc9983f32aff3aa52","kind":"tag","published_at":"2023-03-15T13:24:24.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.11","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.11/manifests"},{"name":"v0.4.0-alpha.10","sha":"8b6be3d5d8a6860e0e5d0717b973fee5c94e07fb","kind":"tag","published_at":"2023-03-15T09:41:44.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.10","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.10/manifests"},{"name":"v0.4.0-alpha.9","sha":"27ff8d23e589e5968ebe968b14d050cd468ca49f","kind":"tag","published_at":"2023-03-15T07:27:16.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.9","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.9/manifests"},{"name":"v0.4.0-alpha.8","sha":"e965d1992af3e9a86a8919de6204fe4edb7b21a2","kind":"tag","published_at":"2023-03-15T05:16:23.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.8","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.8/manifests"},{"name":"v0.4.0-alpha.7","sha":"30e67c013299a4e75136a9a2b41945ee54d8b6b8","kind":"tag","published_at":"2023-03-15T04:55:53.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.7","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.7/manifests"},{"name":"v0.4.0-alpha.6","sha":"91199038f92d170421d2cfe02b928fb24202d9a8","kind":"tag","published_at":"2023-03-15T04:43:20.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.6","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.6/manifests"},{"name":"v0.4.0-alpha.5","sha":"b6e4a61b67d1ba6e6e209dd5ba81cd94fb33d021","kind":"tag","published_at":"2023-03-15T04:26:25.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.5","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.5/manifests"},{"name":"v0.4.0-alpha.4","sha":"1e96ac1ab8304fb09ac7a1bc451b7768f12b7f6b","kind":"tag","published_at":"2023-03-15T02:54:09.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.4","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.4/manifests"},{"name":"v0.4.0-alpha.3","sha":"22da3fb0f57fdb4a935cac70d1b9a7e5fdc02816","kind":"tag","published_at":"2023-03-14T23:33:54.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.3","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.3/manifests"},{"name":"v0.4.0-alpha.2","sha":"cb379745d112d53472da3765b20fe5d28323cb47","kind":"tag","published_at":"2023-03-14T17:07:37.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.2","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.2/manifests"},{"name":"v0.4.0-alpha.1","sha":"53fa15bce900bc299752e07b106a1a84f4432f35","kind":"tag","published_at":"2023-03-14T16:03:30.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.1/manifests"},{"name":"v0.4.0-alpha.0","sha":"4b01f180e0a2548360ec618fe8b6cd4d36fccaff","kind":"tag","published_at":"2023-03-14T15:38:31.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.4.0-alpha.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.4.0-alpha.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.4.0-alpha.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.4.0-alpha.0/manifests"},{"name":"v0.3.0","sha":"3be59fefb6ffb73b1bad693d956d1fd9d8d6d720","kind":"tag","published_at":"2023-03-13T12:36:36.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.3.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"7888af9f6e1d875159dc676d59b59ba4b2e03d7e","kind":"tag","published_at":"2023-03-07T02:47:14.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.2.1","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"d19fddd70b020ebbb61ddaaeef563929d0bfd121","kind":"tag","published_at":"2023-03-06T08:57:24.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.2.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"c7db9d01e7f66662e4f890ded4533be0b0cb0ea1","kind":"tag","published_at":"2023-02-06T06:29:42.000Z","download_url":"https://codeload.github.com/lxsmnsyc/seroval/tar.gz/v0.1.0","html_url":"https://github.com/lxsmnsyc/seroval/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/lxsmnsyc/seroval@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-10-27T09:08:58.237Z","dependent_packages_count":8,"downloads":97791076,"downloads_period":"last-month","dependent_repos_count":1628,"rankings":{"downloads":0.3849166789424341,"dependent_repos_count":0.5288286405643884,"dependent_packages_count":4.382790751717701,"stargazers_count":4.497788885544629,"forks_count":11.95254849296672,"docker_downloads_count":1.372960463490526,"average":3.8533056522043996},"purl":"pkg:npm/seroval","advisories":[{"uuid":"GSA_kwCzR0hTQS1mODZwLWg0ajItN3Fnas4AB_4I","url":"https://github.com/advisories/GHSA-f86p-h4j2-7qgj","title":"Seroval: Code injection through a typed array's own constructor property","description":"### Summary\n\nseroval writes a typed array as a call to its constructor. In affected versions, the constructor name in the output is read from a property that data on the value can replace, and it is written without checks. A typed array that received properties from untrusted data can then put arbitrary code into the serialized output.\n\n### Details\n\nVersion 1.6.0 changed how seroval finds the class of an object, so that objects with their own `constructor` property serialize correctly. Typed arrays still took the constructor name from the value itself, so the name could come from the untrusted property instead of the array's real type.\n\nThese functions are affected:\n\n- `serialize`, `serializeAsync`\n- `crossSerialize`, `crossSerializeAsync`, `crossSerializeStream`\n- the `Serializer` class\n- `compileJSON`\n\n`fromJSON` and `fromCrossJSON` are not affected: they only accept the names of the built-in typed arrays. With the `compactArrayBufferViews` option, the same lookup throws a `TypeError` instead of writing code.\n\n### Impact\n\nAn application is affected only when it serializes a typed array that has an own `constructor` property set from untrusted data. That requires code that copies properties from untrusted objects onto a typed array. This is unusual, so the severity is rated Low, even though the result is script execution in the page that receives the output.\n\n### Patches\n\nFixed in 1.6.11. The constructor name now comes from the array's internal type, which properties on the value cannot change. `compactArrayBufferViews` uses the real type as well.\n\n### Workarounds\n\nIf you cannot upgrade, do not copy properties from untrusted objects onto typed arrays, or remove an own `constructor` property from a typed array before serializing it.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-10-28T21:17:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-f86p-h4j2-7qgj","https://nvd.nist.gov/vuln/detail/CVE-2026-116583","https://github.com/lxsmnsyc/seroval/commit/1313ebbad9687bc0245e08bfd576376e57e0e5c1","https://github.com/lxsmnsyc/seroval/releases/tag/seroval@1.6.11","https://github.com/advisories/GHSA-f86p-h4j2-7qgj"],"source_kind":"github","identifiers":["GHSA-f86p-h4j2-7qgj","CVE-2026-116583"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-28T22:00:56.560Z","updated_at":"2026-10-29T06:00:56.906Z","epss_percentage":0.00268,"epss_percentile":0.1883,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODZwLWg0ajItN3Fnas4AB_4I","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mODZwLWg0ajItN3Fnas4AB_4I","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.11","vulnerable_version_range":"\u003e= 1.6.0, \u003c 1.6.11"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODZwLWg0ajItN3Fnas4AB_4I/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05d3g5LTVwdjktMzM0Oc4AB_4H","url":"https://github.com/advisories/GHSA-9wx9-5pv9-3349","title":"Seroval: Script injection through RegExp sources in serialized output","description":"### Summary\n\nseroval writes a `RegExp` as a regular expression literal. In affected versions, the `\u003c` character in a `RegExp` source is written without escaping. A source built from untrusted input can then end the HTML `\u003cscript\u003e` element that the serialized output is placed in, and run script in the page.\n\n### Details\n\nseroval escapes `\u003c` in strings, so string values cannot end a `\u003cscript\u003e` element. `RegExp` sources did not get the same escaping:\n\n- Versions before 1.0.0 wrote the source as is.\n- Version 1.5.5 stopped escaping `\u003c` in `RegExp` sources, so that named groups and lookbehinds keep working. This removed the escaping for every `\u003c` in a source.\n\nThese functions are affected:\n\n- `serialize`, `serializeAsync`\n- `crossSerialize`, `crossSerializeAsync`, `crossSerializeStream`\n- the `Serializer` class\n- `compileJSON`\n\n`toJSON`, `fromJSON`, `toCrossJSON` and `fromCrossJSON` are not affected, because they never produce JavaScript.\n\n### Impact\n\nAn application is affected when all of these are true:\n\n1. It builds a `RegExp` from untrusted input that is used as regular expression syntax. Input passed through an escaping helper (such as an `escapeRegExp` function) is not enough to exploit this.\n2. It serializes that `RegExp` with one of the functions above.\n3. It places the output inside an HTML `\u003cscript\u003e` element, as server rendering usually does.\n\nIn that case an attacker can run script in the page of any user who receives that output.\n\n### Patches\n\nFixed in 1.6.10. A `RegExp` whose source contains `\u003c` is now written with the `RegExp` constructor and an escaped string source. Named groups and lookbehinds keep working.\n\n### Workarounds\n\nIf you cannot upgrade:\n\n- Do not serialize a `RegExp` built from untrusted pattern syntax. Send its source and flags as strings, and build the `RegExp` on the client.\n- Or reject patterns that contain `\u003c` before they reach the serializer.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-10-28T21:17:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.7,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-9wx9-5pv9-3349","https://nvd.nist.gov/vuln/detail/CVE-2026-116582","https://github.com/lxsmnsyc/seroval/commit/f94ee0b63936dae954ff50d5b5e8ea7cb9b284e6","https://github.com/lxsmnsyc/seroval/releases/tag/seroval@1.6.10","https://github.com/advisories/GHSA-9wx9-5pv9-3349"],"source_kind":"github","identifiers":["GHSA-9wx9-5pv9-3349","CVE-2026-116582"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-28T22:00:56.560Z","updated_at":"2026-10-29T06:00:56.906Z","epss_percentage":0.00188,"epss_percentile":0.08295,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05d3g5LTVwdjktMzM0Oc4AB_4H","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05d3g5LTVwdjktMzM0Oc4AB_4H","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.0.0","vulnerable_version_range":"\u003c 1.0.0"},{"first_patched_version":"1.6.10","vulnerable_version_range":"\u003e= 1.5.5, \u003c 1.6.10"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05d3g5LTVwdjktMzM0Oc4AB_4H/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05N3IyLXFoOW0tNDc0aM4AB_4G","url":"https://github.com/advisories/GHSA-97r2-qh9m-474h","title":"Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)","description":"### Summary\n\n`fromJSON` and `fromCrossJSON` used two node fields without checking them.\n\n- An array node's element list was not checked to be an array. A small payload could set the length the decoder looped over. This part is also tracked in GHSA-wp97-x4hv-qvhp.\n- A sequence node's done index was not checked. A crafted value produced an iterator that never finished.\n\n### Impact\n\nA service that passes untrusted input to `fromJSON` or `fromCrossJSON` can be made unavailable by an unauthenticated request.\n\n- The array case blocks the thread while the decoder runs.\n- The sequence case makes any code that reads the resulting iterator to the end run forever.\n\n### Patches\n\nFixed in `seroval@1.6.8`.\n\n- Element lists must be arrays.\n- A sequence node's throw and done indices must be integers from -1 up to the last element index.\n\nInvalid input throws `SerovalMalformedNodeError`.\n\n### Workarounds\n\nNone. Upgrade to 1.6.8.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-10-28T21:17:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-97r2-qh9m-474h","https://nvd.nist.gov/vuln/detail/CVE-2026-116581","https://github.com/lxsmnsyc/seroval/commit/cdcee3e3bc384ee844360844f8ea98fd2b275d69","https://github.com/lxsmnsyc/seroval/commit/e176f9267e59ddd6c9de89cc9fe85c5b37a5b728","https://github.com/lxsmnsyc/seroval/releases/tag/seroval@1.6.8","https://github.com/advisories/GHSA-97r2-qh9m-474h"],"source_kind":"github","identifiers":["GHSA-97r2-qh9m-474h","CVE-2026-116581"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-28T22:00:56.560Z","updated_at":"2026-10-29T06:00:56.907Z","epss_percentage":0.00451,"epss_percentile":0.38998,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05N3IyLXFoOW0tNDc0aM4AB_4G","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05N3IyLXFoOW0tNDc0aM4AB_4G","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.8","vulnerable_version_range":"\u003c= 1.6.7"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05N3IyLXFoOW0tNDc0aM4AB_4G/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13cDk3LXg0aHYtcXZocM4AB_4F","url":"https://github.com/advisories/GHSA-wp97-x4hv-qvhp","title":"Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length","description":"### Summary\n\n`fromJSON` and `fromCrossJSON` did not check that an array node's element list is an array. A small crafted payload could set the length the decoder used. That length controlled how much memory was allocated and how many times the decoder looped, and it did not depend on the size of the payload.\n\n### Impact\n\nA service that passes untrusted input to `fromJSON` or `fromCrossJSON` can be made unavailable by an unauthenticated request.\n\n- A small payload can allocate enough memory to end the process.\n- A small payload can block the thread for seconds, or without end.\n\nThis affects any framework that decodes request bodies with these functions before its own validation runs.\n\nThis issue is a bypass of the fix for GHSA-66fc-rw6m-c2q6 in 1.4.1.\n\n### Patches\n\nFixed in `seroval@1.6.8`. The deserializer now rejects any node whose element list is not an array, and throws `SerovalMalformedNodeError`.\n\n### Workarounds\n\nNone. Upgrade to 1.6.8.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-10-28T21:17:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-wp97-x4hv-qvhp","https://nvd.nist.gov/vuln/detail/CVE-2026-116584","https://github.com/lxsmnsyc/seroval/commit/cdcee3e3bc384ee844360844f8ea98fd2b275d69","https://github.com/lxsmnsyc/seroval/releases/tag/seroval@1.6.8","https://github.com/advisories/GHSA-wp97-x4hv-qvhp"],"source_kind":"github","identifiers":["GHSA-wp97-x4hv-qvhp","CVE-2026-116584"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-28T22:00:56.560Z","updated_at":"2026-10-29T06:00:56.907Z","epss_percentage":0.00365,"epss_percentile":0.3012,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cDk3LXg0aHYtcXZocM4AB_4F","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cDk3LXg0aHYtcXZocM4AB_4F","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.8","vulnerable_version_range":"\u003e= 1.4.1, \u003c= 1.6.7"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cDk3LXg0aHYtcXZocM4AB_4F/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cnY1LW1yeHYteGNyOc4AB_4E","url":"https://github.com/advisories/GHSA-7rv5-mrxv-xcr9","title":"Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check","description":"### Summary\n\nWhen `fromJSON` rebuilt an async iterator, it called `on()` on the iterator's source without checking that the source was a seroval stream. A crafted payload could pick another value as the source, such as a function returned by an application plugin. The deserializer then called that value's `on` method.\n\nThis is a variant of GHSA-mv8w-475r-vwqw. That fix covered the promise and stream control nodes but not the async iterator node.\n\n### Impact\n\nAn application that passes untrusted input to `fromJSON` with plugins that return callable values can have those callables invoked during deserialization. What this allows depends on what the plugin's values do.\n\n### Affected versions\n\n- Versions up to 1.6.3 accept any value as the source.\n- 1.6.4 rejects the reported payload.\n- 1.6.5 to 1.6.7 check the source by node type, which a payload can get around by reusing a node id.\n- All versions up to 1.6.7 should be treated as affected.\n\n### Patches\n\nFixed in `seroval@1.6.8`. Streams and sequences are now internal class instances. The deserializer checks the source value with `instanceof`, so plain data and plugin values are rejected no matter which node id they use.\n\n### Workarounds\n\nAvoid plugins whose `deserialize` returns functions or objects with an `on` method when decoding untrusted input. Upgrading to 1.6.8 is recommended.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-10-28T21:17:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-7rv5-mrxv-xcr9","https://nvd.nist.gov/vuln/detail/CVE-2026-116580","https://github.com/lxsmnsyc/seroval/commit/3edc78b495ea0d6bd498143e5b3e56996607c5f2","https://github.com/lxsmnsyc/seroval/commit/50926b3ee198fb757e6ce3aa70efeed38d931c8d","https://github.com/lxsmnsyc/seroval/releases/tag/seroval@1.6.8","https://github.com/advisories/GHSA-7rv5-mrxv-xcr9"],"source_kind":"github","identifiers":["GHSA-7rv5-mrxv-xcr9","CVE-2026-116580"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-28T22:00:56.560Z","updated_at":"2026-10-29T06:00:56.908Z","epss_percentage":0.00342,"epss_percentile":0.27517,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cnY1LW1yeHYteGNyOc4AB_4E","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cnY1LW1yeHYteGNyOc4AB_4E","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.8","vulnerable_version_range":"\u003c= 1.6.7"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cnY1LW1yeHYteGNyOc4AB_4E/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wNnZ4LTk3OXYtcmc0Y84AB7ql","url":"https://github.com/advisories/GHSA-p6vx-979v-rg4c","title":"Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)","description":"A fulfilled Promise node deserialized by `fromJSON()` can trigger unintended invocation of a plugin-produced callable through native ECMAScript thenable assimilation. This bypasses the type-confusion fix in `seroval@1.5.3` (GHSA-mv8w-475r-vwqw / CVE-2026-59940) and affects every plugin-capable release from `0.12.0` through the current `1.6.0`.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-10-05T23:40:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-p6vx-979v-rg4c","https://nvd.nist.gov/vuln/detail/CVE-2026-104846","https://github.com/lxsmnsyc/seroval/commit/f1ffcc96d259f9b5b3d71feb262b58240c90e7b7","https://github.com/advisories/GHSA-p6vx-979v-rg4c"],"source_kind":"github","identifiers":["GHSA-p6vx-979v-rg4c","CVE-2026-104846"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-06T00:00:16.069Z","updated_at":"2026-10-26T21:00:39.141Z","epss_percentage":0.00345,"epss_percentile":0.27839,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNnZ4LTk3OXYtcmc0Y84AB7ql","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wNnZ4LTk3OXYtcmc0Y84AB7ql","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.2","vulnerable_version_range":"\u003e= 0.12.0, \u003c= 1.6.0"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNnZ4LTk3OXYtcmc0Y84AB7ql/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qcDgyLWY1bXEtaHdocM4AB7qk","url":"https://github.com/advisories/GHSA-jp82-f5mq-hwhp","title":"Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization","description":"# Summary\n\ndeserializeTypedArray casts the source node to ArrayBuffer without checking it and never bounds the element count. Pass a plain object with a length property and it hits the array-like TypedArray constructor, allocating that many elements. The offset guard above it can't stop this: source.byteLength is undefined, so the comparison is always false.\n\nThe length is one integer in the JSON, so a tiny payload can name any allocation size, and it runs synchronously inside fromJSON, starving the event loop instead of just slowing one request. fromCrossJSON is the same.\n\nImpact is unauthenticated CPU/memory exhaustion for any service deserializing untrusted Seroval JSON: same profile as the array-length and nested-depth DoS issues already fixed here. No confidentiality or integrity impact. DataView has the same unchecked cast but throws instead of allocating. A runtime instanceof ArrayBuffer check plus a size cap should fix it.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-10-05T23:40:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-jp82-f5mq-hwhp","https://nvd.nist.gov/vuln/detail/CVE-2026-104845","https://github.com/lxsmnsyc/seroval/commit/ac0163e420ac7dcbbefac4d069bcefad300a4851","https://github.com/lxsmnsyc/seroval/commit/e54a6f62784b9e48e3a5fa2ab4089ca69fb8996e","https://github.com/advisories/GHSA-jp82-f5mq-hwhp"],"source_kind":"github","identifiers":["GHSA-jp82-f5mq-hwhp","CVE-2026-104845"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-10-06T00:00:16.069Z","updated_at":"2026-10-26T21:00:39.141Z","epss_percentage":0.00426,"epss_percentile":0.366,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcDgyLWY1bXEtaHdocM4AB7qk","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qcDgyLWY1bXEtaHdocM4AB7qk","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.6.3","vulnerable_version_range":"\u003c= 1.6.2"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qcDgyLWY1bXEtaHdocM4AB7qk/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tdjh3LTQ3NXItdndxd84ABfqo","url":"https://github.com/advisories/GHSA-mv8w-475r-vwqw","title":"seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization","description":"## Summary\n\nA type confusion issue in `seroval.fromJSON()` allowed attacker-controlled JSON input to cause Promise control nodes to operate on values from the general deserialization reference table without first verifying that those values were genuine internal promise resolver records.\n\nIn applications that deserialize untrusted Seroval JSON with plugins enabled, this could allow attacker-controlled deserialization side effects. In downstream server frameworks that register plugins returning callable wrappers, this primitive could become unintended server-side invocation and, depending on exposed application functionality, remote code execution or equivalent server compromise.\n\nThe issue was fixed in `seroval@1.5.3`.\n\n## Affected package\n\n- Package: `seroval`\n- Affected API: `fromJSON()`\n- Affected versions: versions prior to `1.5.3` that contain the vulnerable Promise resolver reference handling\n- Patched version: `1.5.3`\n\n## Impact\n\nThe vulnerable deserialization path could confuse attacker-created values in the general reference table with Seroval's internal promise resolver records.\n\nDirect impact in `seroval` is a deserialization side-effect primitive when untrusted JSON is deserialized with plugins enabled. Downstream impact depends on registered plugins and framework usage. If a downstream framework registers plugins that deserialize sensitive callable wrappers, attacker-controlled input may be able to trigger unintended server-side invocation during deserialization.\n\nA concrete downstream impact scenario was validated privately against TanStack Start before the `1.5.3` fix. With `seroval@1.5.3`, the downstream reproducer no longer succeeds.\n\n## Remediation\n\nUpgrade to `seroval@1.5.3` or later.\n\nDownstream projects that accept Seroval JSON from untrusted clients should also consider defense-in-depth controls:\n\n- restrict accepted Seroval node types for client-to-server payloads;\n- allowlist plugin tags for inbound deserialization;\n- avoid registering plugins that produce callable or privileged values for untrusted inputs unless strictly necessary;\n- add regression tests ensuring deserialization cannot cause unintended server-side invocation as a side effect.\n\n## Fix verification\n\nThe original private reproducer was verified against `seroval@1.5.2` and no longer reproduces against `seroval@1.5.3`.\n\nValidation results:\n\n- `seroval@1.5.2`: vulnerable behavior reproduced.\n- `seroval@1.5.3`: deserialization aborts before the attacker-controlled side effect occurs.\n- TanStack Start downstream proof with `seroval@1.5.3`: no evidence side effect is produced.\n\n## Credit\n\nReported by [Mufeed VH](https://x.com/mufeedvh) from [Winfunc Research](https://winfunc.com).\n\n## Disclosure / coordination note\n\nThe downstream TanStack Start impact was coordinated privately. Technical exploit details and proof-of-concept reproduction material have been omitted from this advisory draft for discretion.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-07-24T16:14:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-mv8w-475r-vwqw","https://www.npmjs.com/package/seroval/v/1.5.3","https://github.com/advisories/GHSA-mv8w-475r-vwqw"],"source_kind":"github","identifiers":["GHSA-mv8w-475r-vwqw","CVE-2026-59940"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-24T17:00:09.084Z","updated_at":"2026-10-26T21:01:55.681Z","epss_percentage":0.00812,"epss_percentile":0.56542,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tdjh3LTQ3NXItdndxd84ABfqo","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tdjh3LTQ3NXItdndxd84ABfqo","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.5.3","vulnerable_version_range":"\u003c= 1.5.2"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tdjh3LTQ3NXItdndxd84ABfqo/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zajIyLThxajMtMjZteM4ABRYP","url":"https://github.com/advisories/GHSA-3j22-8qj3-26mx","title":"Seroval affected by Denial of Service via Deeply Nested Objects","description":"Serialization of objects with extreme depth can **exceed the maximum call stack limit**.  \n\n**Mitigation**:  \n`Seroval` introduces a `depthLimit` parameter in serialization/deserialization methods. **An error will be thrown if the depth limit is reached.**","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-22T18:02:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-3j22-8qj3-26mx","https://nvd.nist.gov/vuln/detail/CVE-2026-24006","https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060","https://github.com/advisories/GHSA-3j22-8qj3-26mx"],"source_kind":"github","identifiers":["GHSA-3j22-8qj3-26mx","CVE-2026-24006"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-22T19:00:08.235Z","updated_at":"2026-10-26T21:05:54.210Z","epss_percentage":0.00439,"epss_percentile":0.37831,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zajIyLThxajMtMjZteM4ABRYP","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zajIyLThxajMtMjZteM4ABRYP","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.4.1","vulnerable_version_range":"\u003c= 1.4.0"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zajIyLThxajMtMjZteM4ABRYP/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02NmZjLXJ3Nm0tYzJxNs4ABRWO","url":"https://github.com/advisories/GHSA-66fc-rw6m-c2q6","title":"Seroval affected by Denial of Service via Array serialization","description":"Overriding encoded array lengths by replacing them with an excessively large value causes the deserialization process to **significantly increase processing time**.  \n\n**Mitigation**:  \n`Seroval` no longer encodes array lengths.\nInstead, it computes length using `Array.prototype.length` during deserialization.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-21T17:05:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-66fc-rw6m-c2q6","https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060","https://nvd.nist.gov/vuln/detail/CVE-2026-23957","https://github.com/advisories/GHSA-66fc-rw6m-c2q6"],"source_kind":"github","identifiers":["GHSA-66fc-rw6m-c2q6","CVE-2026-23957"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-21T18:00:08.004Z","updated_at":"2026-10-26T21:05:55.561Z","epss_percentage":0.00439,"epss_percentile":0.37831,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NmZjLXJ3Nm0tYzJxNs4ABRWO","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02NmZjLXJ3Nm0tYzJxNs4ABRWO","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.4.1","vulnerable_version_range":"\u003c= 1.4.0"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NmZjLXJ3Nm0tYzJxNs4ABRWO/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oeDltLWpmNDMtOGZmcs4ABRWN","url":"https://github.com/advisories/GHSA-hx9m-jf43-8ffr","title":"seroval affected by Denial of Service via RegExp serialization","description":"Overriding RegExp serialization with extremely large patterns can **exhaust JavaScript runtime memory** during deserialization. Additionally, overriding RegExp serialization with patterns that trigger **catastrophic backtracking** can lead to ReDoS (Regular Expression Denial of Service).  \n\n**Mitigation**:  \n`Seroval` introduces `disabledFeatures` (a bitmask) in serialization/deserialization methods, with `Feature.RegExp` as a dedicated flag. **Users are recommended to configure `disabledFeatures` to disable RegExp serialization entirely.**","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-21T16:57:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-hx9m-jf43-8ffr","https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060","https://nvd.nist.gov/vuln/detail/CVE-2026-23956","https://github.com/lxsmnsyc/seroval/blob/v0.2.0/packages/seroval/src/index.ts#L90","https://github.com/advisories/GHSA-hx9m-jf43-8ffr"],"source_kind":"github","identifiers":["GHSA-hx9m-jf43-8ffr","CVE-2026-23956"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-21T17:00:07.118Z","updated_at":"2026-10-26T21:04:04.280Z","epss_percentage":0.00534,"epss_percentile":0.44764,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oeDltLWpmNDMtOGZmcs4ABRWN","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oeDltLWpmNDMtOGZmcs4ABRWN","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.4.1","vulnerable_version_range":"\u003e= 0.2.0, \u003c= 1.4.0"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oeDltLWpmNDMtOGZmcs4ABRWN/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zcnhqLTZjZ2YtOGNmd84ABRWC","url":"https://github.com/advisories/GHSA-3rxj-6cgf-8cfw","title":"seroval Affected by Remote Code Execution via JSON Deserialization","description":"Improper input handling in the JSON deserialization component can lead to arbitrary JavaScript code execution.\n\nThe vulnerability can be exploited via overriding constant value and error deserialization, which allows indirect access to unsafe JS evaluation. This requires at least the ability to perform 4 separate requests on the same function and partial knowledge of how the serialized data is used during later runtime processing. \n\nThis vulnerability affects the `fromJSON` and `fromCrossJSON` functions in a client-to-server transmission scenario.\n\nNo known workarounds or mitigations are known, so please upgrade to the patched version.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-21T15:41:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-3rxj-6cgf-8cfw","https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060","https://nvd.nist.gov/vuln/detail/CVE-2026-23737","https://github.com/advisories/GHSA-3rxj-6cgf-8cfw"],"source_kind":"github","identifiers":["GHSA-3rxj-6cgf-8cfw","CVE-2026-23737"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-21T16:00:07.565Z","updated_at":"2026-10-26T21:05:55.566Z","epss_percentage":0.00582,"epss_percentile":0.475,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zcnhqLTZjZ2YtOGNmd84ABRWC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zcnhqLTZjZ2YtOGNmd84ABRWC","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.4.1","vulnerable_version_range":"\u003c 1.4.1"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zcnhqLTZjZ2YtOGNmd84ABRWC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oajc2LTQydngtandwNM4ABRWB","url":"https://github.com/advisories/GHSA-hj76-42vx-jwp4","title":"seroval Affected by Prototype Pollution via JSON Deserialization","description":"Due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization.\nThis affects only JSON deserialization functionality.\n\nAs there is no known workaround, please upgrade to the latest version.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-21T15:41:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-hj76-42vx-jwp4","https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060","https://nvd.nist.gov/vuln/detail/CVE-2026-23736","https://github.com/advisories/GHSA-hj76-42vx-jwp4"],"source_kind":"github","identifiers":["GHSA-hj76-42vx-jwp4","CVE-2026-23736"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-21T16:00:07.565Z","updated_at":"2026-10-29T06:06:13.431Z","epss_percentage":0.00299,"epss_percentile":0.22568,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oajc2LTQydngtandwNM4ABRWB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oajc2LTQydngtandwNM4ABRWB","packages":[{"ecosystem":"npm","package_name":"seroval","versions":[{"first_patched_version":"1.4.1","vulnerable_version_range":"\u003c 1.4.1"}],"purl":"pkg:npm/seroval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oajc2LTQydngtandwNM4ABRWB/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/seroval","docker_dependents_count":29,"docker_downloads_count":653416,"usage_url":"https://repos.ecosyste.ms/usage/npm/seroval","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/seroval/dependencies","status":null,"funding_links":["https://github.com/sponsors/lxsmnsyc"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-27T03:31:54.198Z","issues_count":42,"pull_requests_count":231,"avg_time_to_close_issue":12126397.028571429,"avg_time_to_close_pull_request":601648.3269230769,"issues_closed_count":35,"pull_requests_closed_count":208,"pull_request_authors_count":16,"issue_authors_count":24,"avg_comments_per_issue":2.119047619047619,"avg_comments_per_pull_request":1.8138528138528138,"merged_pull_requests_count":157,"bot_issues_count":0,"bot_pull_requests_count":103,"past_year_issues_count":11,"past_year_pull_requests_count":191,"past_year_avg_time_to_close_issue":6262125.888888889,"past_year_avg_time_to_close_pull_request":594605.7470588235,"past_year_issues_closed_count":9,"past_year_pull_requests_closed_count":170,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":9,"past_year_avg_comments_per_issue":2.2727272727272725,"past_year_avg_comments_per_pull_request":2.157068062827225,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":103,"past_year_merged_pull_requests_count":119,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/lxsmnsyc%2Fseroval/issues","maintainers":[{"login":"lxsmnsyc","count":66,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lxsmnsyc"}],"active_maintainers":[{"login":"lxsmnsyc","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lxsmnsyc"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/seroval/codemeta","maintainers":[{"uuid":"lxsmnsyc","login":"lxsmnsyc","name":null,"email":"alexis.munsayac@gmail.com","url":null,"packages_count":171,"html_url":"https://www.npmjs.com/~lxsmnsyc","role":null,"created_at":"2023-02-06T07:33:14.288Z","updated_at":"2023-02-06T07:33:14.288Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/lxsmnsyc/packages"},{"uuid":"schiller-manuel","login":"schiller-manuel","name":null,"email":"meisterpink@gmail.com","url":null,"packages_count":3,"html_url":"https://www.npmjs.com/~schiller-manuel","role":null,"created_at":"2025-12-20T11:29:56.402Z","updated_at":"2025-12-20T11:29:56.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/schiller-manuel/packages"}]}