Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/01/22 6:02 p.m.•27 views

Seroval affected by Denial of Service via Deeply Nested Objects

Serialization of objects with extreme depth can exceed the maximum call stack limit. Mitigation: Seroval introduces a depthLimit parameter in serialization/deserialization methods. An error will be thrown if the depth limit is reached...

7.5CVSS5.9AI score0.00439EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/01/22 2:32 a.m.•14 views

CVE-2026-24006

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, serialization of objects with extreme depth can exceed the maximum call stack limit. In version 1.4.1, Seroval introduces a depthLimit parameter in...

7.5CVSS5.8AI score0.00439EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder