Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2026/10/28 9:17 p.m.•9 views

GHSA-F86P-H4J2-7QGJ Seroval: Code injection through a typed array's own constructor property

Summary seroval writes a typed array as a call to its constructor. In affected versions, the constructor name in the output is read from a property that data on the value can replace, and it is written without checks. A typed array that received properties from untrusted data can then put arbitra...

5.3CVSS6.4AI score0.00268EPSS
SaveExploits0References5
Rows per page
Query Builder