Product by Lxsmnsyc

    Seroval

    13 known vulnerabilities in Seroval (Lxsmnsyc), 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Seroval (Lxsmnsyc)
    CriticalCVE-2026-59940

    Lxsmnsyc Seroval: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2026-104846

    Lxsmnsyc Seroval: Type Confusion

    		9.8
    HighCVE-2026-116581

    Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)

    		7.5
    HighCVE-2026-104845

    Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization

    		7.5
    HighCVE-2026-116584

    Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

    		7.5
    HighCVE-2026-116580

    Lxsmnsyc Seroval: Deserialization of Untrusted Data

    		7.3
    HighCVE-2026-23737

    seroval Affected by Remote Code Execution via JSON Deserialization

    		7.5
    HighCVE-2026-23956

    seroval affected by Denial of Service via RegExp serialization

    		7.5
    HighCVE-2026-24006

    Seroval affected by Denial of Service via Deeply Nested Objects

    		7.5
    HighCVE-2026-23957

    seroval is vulnerable to Denial of Service via array serialization

    		7.5
    MediumCVE-2026-116583

    Seroval: Code injection through a typed array's own constructor property

    		—
    CriticalCVE-2026-23736

    seroval Affected by Prototype Pollution via JSON Deserialization

    		7.3
    MediumCVE-2026-116582

    Seroval: Script injection through RegExp sources in serialized output

    		4.7

    News

    All products by Lxsmnsyc