EUVD-2026-3668

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding encoded array lengths by replacing them with an excessively large value causes the deserialization process to significantly increase processing...

SUSE CVE-2016-7417

ext/spl/splarray.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data...

PT-2022-37165 · Unknown · Com.Fasterxml.Jackson.Core

Name of the Vulnerable Software and Affected Versions: com.fasterxml.jackson.core affected versions not specified Description: The issue is related to a security exception that occurs during the serialization of an ArrayNode. The crash state indicates that the problem arises in the...