Логотип exploitDog
bind:CVE-2026-23956
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-23956

Количество 3

Количество 3

redhat логотип

CVE-2026-23956

2 месяца назад

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during deserialization. Additionally, overriding RegExp serialization with patterns that trigger catastrophic backtracking can lead to ReDoS (Regular Expression Denial of Service). This issue has been fixed in version 1.4.1.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2026-23956

2 месяца назад

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during deserialization. Additionally, overriding RegExp serialization with patterns that trigger catastrophic backtracking can lead to ReDoS (Regular Expression Denial of Service). This issue has been fixed in version 1.4.1.

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-hx9m-jf43-8ffr

2 месяца назад

seroval affected by Denial of Service via RegExp serialization

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2026-23956

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during deserialization. Additionally, overriding RegExp serialization with patterns that trigger catastrophic backtracking can lead to ReDoS (Regular Expression Denial of Service). This issue has been fixed in version 1.4.1.

CVSS3: 7.5
0%
Низкий
2 месяца назад
nvd логотип
CVE-2026-23956

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, overriding RegExp serialization with extremely large patterns can exhaust JavaScript runtime memory during deserialization. Additionally, overriding RegExp serialization with patterns that trigger catastrophic backtracking can lead to ReDoS (Regular Expression Denial of Service). This issue has been fixed in version 1.4.1.

CVSS3: 7.5
0%
Низкий
2 месяца назад
github логотип
GHSA-hx9m-jf43-8ffr

seroval affected by Denial of Service via RegExp serialization

CVSS3: 7.5
0%
Низкий
2 месяца назад

Уязвимостей на страницу