seroval
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- npm
- Vulnerability status
- 8 advisory(ies) without a verdict
Advisories (8)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-3j22-8qj3-26mx Seroval affected by Denial of Service via Deeply Nested Objects | < 1.4.1 | Undetermined |
| GHSA-3rxj-6cgf-8cfw seroval Affected by Remote Code Execution via JSON Deserialization | < 1.4.1 | Undetermined |
| GHSA-66fc-rw6m-c2q6 Seroval affected by Denial of Service via Array serialization | < 1.4.1 | Undetermined |
| GHSA-hj76-42vx-jwp4 seroval Affected by Prototype Pollution via JSON Deserialization | < 1.4.1 | Undetermined |
| GHSA-hx9m-jf43-8ffr seroval affected by Denial of Service via RegExp serialization | 0.2.0 – < 1.4.1 | Undetermined |
| GHSA-jp82-f5mq-hwhp Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization | < 1.6.3 | Undetermined |
| GHSA-mv8w-475r-vwqw seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization | < 1.5.3 | Undetermined |
| GHSA-p6vx-979v-rg4c Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw) | 0.12.0 – < 1.6.2 | Undetermined |
Sources
| Source | Licence |
|---|