CVE-2026-23736
HIGH7.3EPSS 0.33%seroval Affected by Prototype Pollution via JSON Deserialization
發布日:2026/1/21修改日:2026/2/3
描述
Due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This affects only JSON deserialization functionality. As there is no known workaround, please upgrade to the latest version.
受影響套件(1)
- npm/serovalfrom 0, < 1.4.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |