CVE-2026-116583

About vulnerability

Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities. From 1.6.0 until 1.6.11, the JavaScript-output APIs derive a typed array’s constructor name from a property on the value that can be replaced by an own constructor property. When application code copies untrusted properties onto a typed array and then passes it to serialize, serializeAsync, crossSerialize, crossSerializeAsync, crossSerializeStream, Serializer, or compileJSON, the attacker-controlled name is written as executable JavaScript and can run in the page receiving the output. This issue is fixed in version 1.6.11.

Affected product:

TanStack/devtools , TanStack/router , TanStack/table , Vue , ag-grid , ai , ai-sdk-solid , ariakit-solid , ariakit-solid-components , ariakit-solid-utils , astrojs-solid-js , babel-preset-solid , clerk-tanstack-react-start , corvu , dnd-kit-solid , dom-expressions , effect-atom-solid , embla-carousel , ext-apps , form , gutenberg , hotkeys , json-render-devtools-solid , json-render-solid , json-render-tanstack-start , kobalte , lingui-solid , livestore , lottiefiles-dotlottie-solid , lucide-solid , neodrag , nuxt , nuxt-devtools-ui-kit , nuxt-nitro-server , nuxt-rspack-builder , nuxt-vite-builder , nuxt-vite-server , nuxt-webpack-builder , octanejs-devtools , octanejs-tanstack-devtools , octanejs-tanstack-router , octanejs-tanstack-router-ssr-query , octanejs-tanstack-start , opencode , opentui-solid , orpc-solid-query , pacer , powersync-nuxt , query , ripple , router , rsbuild , rspress , sentry-nuxt , sentry-solid , sentry-solidstart , seroval , seroval-plugins , solid , solid-devtools , solid-devtools-debugger , solid-devtools-frontend , solid-devtools-logger , solid-headless , solid-list , solid-markdown , solid-meta , solid-motion , solid-presence , solid-prevent-scroll , solid-primitives , solid-primitives-keyboard , solid-primitives-keyed , solid-primitives-props , solid-primitives-resource , solid-primitives-storage , solid-refresh , solid-sonner , solid-transition-group , solid-use , solid-vite-plugin , solidjs-router , solidjs-start , solidjs-web , storybook-tanstack-react , tabler-icons-solidjs , tanstack-ai-devtools-core , tanstack-ai-solid , tanstack-ai-solid-ui , tanstack-angular-devtools , tanstack-angular-hotkeys-devtools , tanstack-angular-pacer-devtools , tanstack-angular-query-experimental , tanstack-angular-table-devtools , tanstack-devtools , tanstack-devtools-a11y , tanstack-devtools-utils , tanstack-hotkeys-devtools , tanstack-pacer-devtools , tanstack-preact-ai-devtools , tanstack-preact-hotkeys-devtools , tanstack-preact-pacer-devtools , tanstack-preact-query-devtools , tanstack-preact-table-devtools , tanstack-query-devtools , tanstack-react-ai-devtools , tanstack-react-form-devtools , tanstack-react-hotkeys-devtools , tanstack-react-pacer-devtools , tanstack-react-query-devtools , tanstack-react-router , tanstack-react-router-devtools , tanstack-react-router-ssr-query , tanstack-react-start , tanstack-react-start-client , tanstack-react-start-rsc , tanstack-react-start-server , tanstack-react-table-devtools , tanstack-router , tanstack-router-cli , tanstack-router-core , tanstack-router-devtools-core , tanstack-router-generator , tanstack-router-plugin , tanstack-router-ssr-query-core , tanstack-router-vite-plugin , tanstack-solid-ai-devtools , tanstack-solid-db , tanstack-solid-devtools , tanstack-solid-hotkeys , tanstack-solid-hotkeys-devtools , tanstack-solid-pacer , tanstack-solid-query , tanstack-solid-query-devtools , tanstack-solid-query-persist-client , tanstack-solid-router , tanstack-solid-start , tanstack-solid-start-server , tanstack-solid-store , tanstack-solid-table-devtools , tanstack-solid-virtual , tanstack-start-client-core , tanstack-start-plugin-core , tanstack-start-server-core , tanstack-start-static-server-functions , tanstack-start-storage-context , tanstack-svelte-devtools , tanstack-svelte-pacer-devtools , tanstack-svelte-query-devtools , tanstack-table , tanstack-vue-devtools , tanstack-vue-hotkeys-devtools , tanstack-vue-pacer-devtools , tanstack-vue-start , tanstack-vue-start-client , tanstack-vue-start-server , tanstack-vue-table-devtools , tanstack-zod-adapter , terracotta , tsrx-bun-plugin-solid , tsrx-rspack-plugin-solid , tsrx-solid , tsrx-vite-plugin-solid , unhead-solid-js , vite-plugin-solid , vite-plugin-tanstack-start-zephyr , wagmi-solid , wordpress-admin-ui , wordpress-block-directory , wordpress-customize-widgets , wordpress-edit-post , wordpress-edit-site , wordpress-edit-widgets , wordpress-lazy-editor , wordpress-route , xstate-solid , zag-js-solid , zephyr-nuxt-module

Affected packages:

seroval @ 1.6.4 (+2133 more)