ROOT-APP-NPM-CVE-2026-59940 CVE-2026-59940 in seroval - Patched by Root

Root has patched CVE-2026-59940 in the seroval package for Root:npm. Multiple fixed versions available...

SUSE CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...