CVE-2026-23736

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This vulnerability affects only JSON...

CVE-2026-23736

creationtimestamp| type| source ---|---|--- 2026-01-22 01:16:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcxz7lasom2t...