~ / search / GHSA-3j22-8qj3-26mx

GHSA-3j22-8qj3-26mx

Seroval affected by Denial of Service via Deeply Nested Objects

Source: GitHub Advisory Database (reviewed) High CVE-2026-24006

Packages

EcosystemPackageAffectedFixed in
npm seroval < 1.4.1 1.4.1

Details

As written in the advisory (Markdown source, shown as plain text).

Serialization of objects with extreme depth can **exceed the maximum call stack limit**. **Mitigation**: `Seroval` introduces a `depthLimit` parameter in serialization/deserialization methods. **An error will be thrown if the depth limit is reached.**

References

External links from the advisory. They lead to third-party sites.