CVE-2026-116583

The Seroval library (versions 1.6.0 through 1.6.11 ) contains a code injection vulnerability. The JavaScript-output APIs incorrectly derive a typed array's constructor name from a property that can be replaced by an own constructor property . If application code copies untrusted properties onto a...