EUVD-2026-110462

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive a typed array's constructor name from a property on the value that can be replaced by an own constructor property. When...

CVE-2026-116583

The Seroval library (versions 1.6.0 through 1.6.11 ) contains a code injection vulnerability. The JavaScript-output APIs incorrectly derive a typed array's constructor name from a property that can be replaced by an own constructor property . If application code copies untrusted properties onto a...