Moderate

GSA_kwCzR0hTQS1mODZwLWg0ajItN3Fnas4AB_4I

Seroval: Code injection through a typed array's own constructor property
Ecosystems: npm
Packages: seroval
Source: github
Published: about 7 hours ago

Moderate

GSA_kwCzR0hTQS05d3g5LTVwdjktMzM0Oc4AB_4H

Seroval: Script injection through RegExp sources in serialized output
Ecosystems: npm
Packages: seroval
Source: github
Published: about 7 hours ago

High

GSA_kwCzR0hTQS05N3IyLXFoOW0tNDc0aM4AB_4G

Seroval: fromJSON deserializer trusts node-supplied array length and sequence doneAt (unauthenticated event-loop DoS)
Ecosystems: npm
Packages: seroval
Source: github
Published: about 7 hours ago

High

GSA_kwCzR0hTQS13cDk3LXg0aHYtcXZocM4AB_4F

Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
Ecosystems: npm
Packages: seroval
Source: github
Published: about 7 hours ago

High

GSA_kwCzR0hTQS03cnY1LW1yeHYteGNyOc4AB_4E

Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
Ecosystems: npm
Packages: seroval
Source: github
Published: about 7 hours ago

Critical

GSA_kwCzR0hTQS1wNnZ4LTk3OXYtcmc0Y84AB7ql

Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)
Ecosystems: npm
Packages: seroval
Source: github
Published: 23 days ago

High

GSA_kwCzR0hTQS1qcDgyLWY1bXEtaHdocM4AB7qk

Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 23 days ago

Critical

GSA_kwCzR0hTQS1tdjh3LTQ3NXItdndxd84ABfqo

seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 3 months ago

High

GSA_kwCzR0hTQS0zajIyLThxajMtMjZteM4ABRYP

Seroval affected by Denial of Service via Deeply Nested Objects
Ecosystems: npm
Packages: seroval
Source: github
Published: 9 months ago

High

GSA_kwCzR0hTQS02NmZjLXJ3Nm0tYzJxNs4ABRWO

Seroval affected by Denial of Service via Array serialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 9 months ago

High

GSA_kwCzR0hTQS1oeDltLWpmNDMtOGZmcs4ABRWN

seroval affected by Denial of Service via RegExp serialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 9 months ago

High

GSA_kwCzR0hTQS0zcnhqLTZjZ2YtOGNmd84ABRWC

seroval Affected by Remote Code Execution via JSON Deserialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 9 months ago

High

GSA_kwCzR0hTQS1oajc2LTQydngtandwNM4ABRWB

seroval Affected by Prototype Pollution via JSON Deserialization
Ecosystems: npm
Packages: seroval
Source: github
Published: 9 months ago

Registry	npmjs.org
Source	Repository
Homepage	Homepage
JSON API	View JSON
CodeMeta	codemeta.json

PURL	pkg:npm/seroval spec
License	MIT
First Release	over 3 years ago
Last Synced	about 19 hours ago

Stars	733 on GitHub
Forks	18 on GitHub
Docker Dependents	29
Docker Downloads	653,416
Commits	803
Committers	3
Avg per Author	267.667
DDS	0.002