seroval Affected by Prototype Pollution via JSON Deserialization

GHSA-hj76-42vx-jwp4 · CVE-2026-23736

Published Jan 21, 2026 · Modified Feb 3, 2026

Description

Due to improper input validation, a malicious object key can lead to prototype pollution during JSON deserialization.
This affects only JSON deserialization functionality.

As there is no known workaround, please upgrade to the latest version.

References

WEB https://github.com/lxsmnsyc/seroval/security/advisories/GHSA-hj76-42vx-jwp4
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-23736
WEB https://github.com/lxsmnsyc/seroval/commit/ce9408ebc87312fcad345a73c172212f2a798060
PACKAGE https://github.com/lxsmnsyc/seroval

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes