CVE-2026-104845
1 advisory.
npm/seroval CVE-2026-104845: high 7.5, EPSS 0.43%
Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
Action: Upgrade seroval to 1.6.3 or later.
npm i seroval@1.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.3 | - |
Fixed versions
| 1.6.3 |
Sources
- osv: GHSA-jp82-f5mq-hwhp
- https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-jp82-f5mq-hwhp
- https://nvd.nist.gov/vuln/detail/CVE-2026-104845
- https://github.com/lxsmnsyc/seroval/commit/ac0163e420ac7dcbbefac4d069bcefad300a4851
- https://github.com/lxsmnsyc/seroval/commit/e54a6f62784b9e48e3a5fa2ab4089ca69fb8996e
- https://github.com/lxsmnsyc/seroval
CVE-2026-104845 · published · modified · JSON