DailyCVE@dailycve
🔴 Seroval, Denial of Service, #CVE-2026-116581 (High) -DC-Oct2026-3925 https://dailycve.com/seroval-denial-of-service-cve-2026-116581-high-dc-oct2026-3925/
0000028
247 followersView on X
CVE-2026-116581
LOWCVSS 7.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.8, fromJSON and fromCrossJSON do not validate a sequence node's done index. A crafted done index can create an iterator that never finishes when application code consumes it to completion. An unauthenticated request to a service that deserializes untrusted input can therefore block the event loop, exhaust process memory, or make the service unavailable. This issue is fixed in version 1.6.8.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-835CWE-1284
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day