https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:58:58.308542+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-266306 EUVD-2026-266306 2026-10-07T19:58:58.353800+00:00 EUVD-2026-266306 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23736 fkie_cve-2026-23736 2026-10-07T19:58:58.353836+00:00

seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. In versions 1.4.0 and below, due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This vulnerability affects only JSON deserialization functionality. This issue is fixed in version 1.4.1.

 https://cve.radiocsirt.org/vuln/ghsa-hj76-42vx-jwp4 GHSA-hj76-42vx-jwp4 — seroval Affected by Prototype Pollution via JSON Deserialization 2026-10-07T19:58:58.353870+00:00

Affected: npm: seroval

Due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization. This affects only JSON deserialization functionality.

As there is no known workaround, please upgrade to the latest version.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11673-1 openSUSE-SU-2026:11673-1 — opencode-1.18.26-1.1 on GA media 2026-10-07T19:58:58.353895+00:00

opencode-1.18.26-1.1 on GA media