[ Vendor · 2 CVEs ]
lxsmnsyc
CVEs affecting lxsmnsyc published in the last 30 days, plus any lxsmnsyc CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-104845 | 2 Oct 2026 | CVSS 7.5 | Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserializationSeroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray… | Fix |
| CVE-2026-104846 | 2 Oct 2026 | CVSS 9.8 | Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON… | Fix |