CVE-2026-84292

fast-uri , a URI library in the Fastify ecosystem, fails to validate the port component when serializing an authority. The recomposeAuthority function concatenates the port verbatim without escaping, so a crafted non-digit value (e.g., containing @) can inject authority delimiters, demoting the i...

CVE-2026-84292: Improper Encoding or Escaping of Output

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can inject authority delimiters, demoting the intended host t...

Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.

Summary serialize-javascript is used by IBM Storage Fusion Data Foundation, which could cause Denial of Service. CVE-2026-34043. Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version...

net: slip: serialize receive against buffer reallocation

...

CVE-2026-68146

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...

CLSA-2026-1776645372 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 5.0.1-tuxcare.2...

CLSA-2026-1776645371 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 6.0.2-tuxcare.2...

CLSA-2026-1776213251 TuxCare security update for serialize-javascript (3 CVEs)

TuxCare rebuilt serialize-javascript to address 3 CVEs. Fixed in 2.1.2-tuxcare.1...

CLSA-2026-1774916713 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 3.1.0-tuxcare.1...

CLSA-2026-1774916711 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 5.0.1-tuxcare.1...

CLSA-2026-1774916712 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 4.0.0-tuxcare.1...

CLSA-2026-1774398069 TuxCare security update for serialize-javascript (3 CVEs)

TuxCare rebuilt serialize-javascript to address 3 CVEs. Fixed in 1.9.1-tuxcare.1...

CLSA-2026-1773447385 TuxCare security update for serialize-javascript (1 CVE)

TuxCare rebuilt serialize-javascript to address 1 CVE. Fixed in 6.0.2-tuxcare.1...

Malicious code in @keyv/serialize-msgpackr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43046321629b6cdd57488aa3c6cc4d826a41f11330ae467c7f7e8c5ed9e8dbc0 Package presents as a serialization adapter for keyv using msgpackr. No static or behavioral indicators of exfiltration, install-time remote code...

Malicious code in @keyv/serialize-superjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fd6f442e95be934353f6974c755757a0693ad83ea1bb5db17d1f555c2663fc Package @keyv/[email protected] shows no a static rule matches and no traced malicious behavior. No install-time lifecycle hooks, network...

MAL-2026-12022 Malicious code in @keyv/serialize-superjson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60fd6f442e95be934353f6974c755757a0693ad83ea1bb5db17d1f555c2663fc Package @keyv/[email protected] shows no a static rule matches and no traced malicious behavior. No install-time lifecycle hooks, network...

datatran (1.5.0), log-serialize (2.1.1) potentially affected by unknown CVE via proto-bin (2.5.3)

proto-bin NPM version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on proto-bin and may be impacted: - datatran 1.5.0 - log-serialize 2.1.1 Source cves: unknown CVE Source advisory: SNYK:JS-PROTOBIN-18385342...

ROOT-APP-NPM-CVE-2019-16769 CVE-2019-16769 in @rootio/serialize-javascript - Patched by Root

Root has patched CVE-2019-16769 in the @rootio/serialize-javascript package for Root:npm. Multiple fixed versions available...

CVE-2026-63945

CVE-2026-63945 affects the Linux kernel Bluetooth ISO code. The vulnerability arises when iso_sock_clear_timer() reads iso_pi(sk)->conn twice without holding the socket lock, while iso_chan_del() may NULL the connection under lock_sock, creating a window where the reference can be dropped and ...

Security Bulletin: Vulnerability in serialize-javascript bundled with IBM Fusion, IBM Fusion HCI and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the serialize-javascript library, which is affected by a denial of service vulnerability. CVE-2026-34043 Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes...