[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-34043":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":92,"aliases":93,"duplicate_of":9,"upstream":95,"downstream":96,"duplicates":113,"related":114,"reserved_at":9,"published_at":117,"modified_at":118,"state":119,"summary":120,"references_raw":129,"kevs":164,"epss":165,"epss_history":168,"metrics":443,"affected":457},"CVE-2026-34043","Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted \"array-like\" object (an object that inherits from Array.prototype but has a very large length property), the process enters an intensive loop that consumes 100% CPU and hangs indefinitely. This issue has been patched in version 7.0.5.",null,[11,86],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],{"_key":87,"id":87,"name":88,"description":89,"type":15,"status":90,"abstraction":17,"likelihood_of_exploit":9,"capec":91},"CWE-834","Excessive Iteration","The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.","Incomplete",[],[],[94],"GHSA-qj8w-gfj5-8c6v",[],[97,99,101,103,105,107,109,111],{"_key":98},"UBUNTU-CVE-2026-34043",{"_key":100},"DEBIAN-CVE-2026-34043",{"_key":102},"RHSA-2026:21286",{"_key":104},"RHSA-2026:21291",{"_key":106},"RHSA-2026:21293",{"_key":108},"RHSA-2026:24332",{"_key":110},"RHSA-2026:24334",{"_key":112},"RHSA-2026:24335",[],[115],{"_key":116},"CGA-2P7J-RWC3-5X9R","2026-03-31T01:48:45.759Z","2026-03-31T13:55:54.998Z","Analyzed",{"cisa_kev":121,"cisa_ransomware":121,"cisa_vendor":9,"epss_severity":122,"epss_score":123,"severity":124,"severity_score":125,"severity_version":126,"severity_source":127,"severity_vector":128,"severity_status":119},false,"low",0.00472,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[130,139,145,150,155,160],{"url":131,"sources":132,"tags":135},"https://github.com/yahoo/serialize-javascript/security/advisories/GHSA-qj8w-gfj5-8c6v",[133,134,127],"osv_npm","cve.org",[136,137,138],"WEB","X Refsource CONFIRM","Vendor Advisory",{"url":140,"sources":141,"tags":142},"https://github.com/yahoo/serialize-javascript/commit/f147e90269b58bb6e539cfdf3d0e20d6ad14204b",[133,134,127],[136,143,144],"X Refsource MISC","Patch",{"url":146,"sources":147,"tags":148},"https://github.com/yahoo/serialize-javascript",[133],[149],"PACKAGE",{"url":151,"sources":152,"tags":153},"https://github.com/yahoo/serialize-javascript/releases/tag/v7.0.5",[133,134,127],[136,143,154],"Release Notes",{"url":156,"sources":157,"tags":158},"https://nvd.nist.gov/vuln/detail/CVE-2026-34043",[133],[159],"Advisory",{"url":161,"sources":162,"tags":163},"https://github.com/yahoo/serialize-javascript/releases/tag/v5.0.0",[133],[136],[],{"date":166,"score":123,"percentile":167},"2026-07-05",0.37495,[169,173,176,179,182,186,189,193,196,199,202,205,208,211,214,217,220,223,226,229,232,235,239,242,245,248,251,254,257,260,263,266,269,273,276,279,282,285,288,291,294,297,300,303,305,308,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,375,379,382,385,388,391,394,397,400,404,407,410,413,416,419,422,425,428,431,434,437,440],{"date":170,"score":171,"percentile":172},"2026-03-31",0.00038,0.112,{"date":174,"score":171,"percentile":175},"2026-04-01",0.11203,{"date":177,"score":171,"percentile":178},"2026-04-02",0.11348,{"date":180,"score":171,"percentile":181},"2026-04-03",0.11369,{"date":183,"score":184,"percentile":185},"2026-04-04",0.0004,0.12185,{"date":187,"score":184,"percentile":188},"2026-04-05",0.12168,{"date":190,"score":191,"percentile":192},"2026-04-06",0.00052,0.16318,{"date":194,"score":191,"percentile":195},"2026-04-07",0.16305,{"date":197,"score":191,"percentile":198},"2026-04-08",0.16392,{"date":200,"score":191,"percentile":201},"2026-04-09",0.16451,{"date":203,"score":191,"percentile":204},"2026-04-10",0.16471,{"date":206,"score":191,"percentile":207},"2026-04-11",0.16436,{"date":209,"score":191,"percentile":210},"2026-04-12",0.16396,{"date":212,"score":191,"percentile":213},"2026-04-13",0.16334,{"date":215,"score":191,"percentile":216},"2026-04-14",0.16252,{"date":218,"score":191,"percentile":219},"2026-04-15",0.16286,{"date":221,"score":191,"percentile":222},"2026-04-16",0.16271,{"date":224,"score":191,"percentile":225},"2026-04-17",0.16282,{"date":227,"score":191,"percentile":228},"2026-04-18",0.16291,{"date":230,"score":191,"percentile":231},"2026-04-19",0.16234,{"date":233,"score":191,"percentile":234},"2026-04-20",0.16225,{"date":236,"score":237,"percentile":238},"2026-04-21",0.00017,0.04061,{"date":240,"score":237,"percentile":241},"2026-04-22",0.0407,{"date":243,"score":237,"percentile":244},"2026-04-23",0.04071,{"date":246,"score":237,"percentile":247},"2026-04-24",0.04076,{"date":249,"score":237,"percentile":250},"2026-04-25",0.04096,{"date":252,"score":237,"percentile":253},"2026-04-26",0.04094,{"date":255,"score":237,"percentile":256},"2026-04-27",0.04082,{"date":258,"score":237,"percentile":259},"2026-04-28",0.0411,{"date":261,"score":237,"percentile":262},"2026-04-29",0.04128,{"date":264,"score":237,"percentile":265},"2026-04-30",0.04123,{"date":267,"score":237,"percentile":268},"2026-05-01",0.04122,{"date":270,"score":271,"percentile":272},"2026-05-02",0.00018,0.04923,{"date":274,"score":271,"percentile":275},"2026-05-03",0.04912,{"date":277,"score":271,"percentile":278},"2026-05-04",0.04905,{"date":280,"score":271,"percentile":281},"2026-05-05",0.04903,{"date":283,"score":271,"percentile":284},"2026-05-06",0.04914,{"date":286,"score":271,"percentile":287},"2026-05-07",0.04955,{"date":289,"score":271,"percentile":290},"2026-05-08",0.04957,{"date":292,"score":271,"percentile":293},"2026-05-09",0.04997,{"date":295,"score":271,"percentile":296},"2026-05-10",0.05012,{"date":298,"score":271,"percentile":299},"2026-05-11",0.05003,{"date":301,"score":271,"percentile":302},"2026-05-12",0.04999,{"date":304,"score":271,"percentile":299},"2026-05-13",{"date":306,"score":271,"percentile":307},"2026-05-14",0.04996,{"date":309,"score":271,"percentile":293},"2026-05-15",{"date":311,"score":271,"percentile":312},"2026-05-16",0.05006,{"date":314,"score":271,"percentile":315},"2026-05-17",0.05,{"date":317,"score":271,"percentile":318},"2026-05-18",0.04978,{"date":320,"score":271,"percentile":321},"2026-05-19",0.04969,{"date":323,"score":271,"percentile":324},"2026-05-20",0.04966,{"date":326,"score":271,"percentile":327},"2026-05-21",0.04968,{"date":329,"score":271,"percentile":330},"2026-05-22",0.05163,{"date":332,"score":271,"percentile":333},"2026-05-23",0.05151,{"date":335,"score":271,"percentile":336},"2026-05-24",0.05152,{"date":338,"score":271,"percentile":339},"2026-05-25",0.05136,{"date":341,"score":271,"percentile":342},"2026-05-26",0.05135,{"date":344,"score":271,"percentile":345},"2026-05-27",0.05166,{"date":347,"score":271,"percentile":348},"2026-05-28",0.05233,{"date":350,"score":271,"percentile":351},"2026-05-29",0.05246,{"date":353,"score":271,"percentile":354},"2026-05-30",0.05236,{"date":356,"score":271,"percentile":357},"2026-05-31",0.05219,{"date":359,"score":271,"percentile":360},"2026-06-01",0.05158,{"date":362,"score":271,"percentile":363},"2026-06-02",0.05089,{"date":365,"score":271,"percentile":366},"2026-06-03",0.05054,{"date":368,"score":271,"percentile":369},"2026-06-04",0.0505,{"date":371,"score":271,"percentile":372},"2026-06-05",0.05069,{"date":374,"score":271,"percentile":366},"2026-06-06",{"date":376,"score":377,"percentile":378},"2026-06-07",0.00019,0.05386,{"date":380,"score":377,"percentile":381},"2026-06-08",0.05347,{"date":383,"score":377,"percentile":384},"2026-06-09",0.0539,{"date":386,"score":377,"percentile":387},"2026-06-10",0.05417,{"date":389,"score":377,"percentile":390},"2026-06-11",0.05442,{"date":392,"score":377,"percentile":393},"2026-06-12",0.05468,{"date":395,"score":377,"percentile":396},"2026-06-13",0.05462,{"date":398,"score":377,"percentile":399},"2026-06-14",0.05453,{"date":401,"score":402,"percentile":403},"2026-06-15",0.00473,0.37007,{"date":405,"score":402,"percentile":406},"2026-06-16",0.37064,{"date":408,"score":402,"percentile":409},"2026-06-17",0.37114,{"date":411,"score":402,"percentile":412},"2026-06-18",0.37172,{"date":414,"score":402,"percentile":415},"2026-06-19",0.37153,{"date":417,"score":402,"percentile":418},"2026-06-20",0.37143,{"date":420,"score":402,"percentile":421},"2026-06-21",0.37129,{"date":423,"score":402,"percentile":424},"2026-06-22",0.3712,{"date":426,"score":123,"percentile":427},"2026-06-23",0.37158,{"date":429,"score":123,"percentile":430},"2026-06-24",0.37196,{"date":432,"score":123,"percentile":433},"2026-06-25",0.37273,{"date":435,"score":123,"percentile":436},"2026-06-26",0.37314,{"date":438,"score":123,"percentile":439},"2026-06-27",0.37357,{"date":441,"score":123,"percentile":442},"2026-06-28",0.37339,[444,450,453],{"source":133,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":445,"cvss_v4_0":9},{"baseScore":446,"baseSeverity":9,"vectorString":447,"impactScore":448,"exploitabilityScore":449},5.9,"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",6,5.6,{"source":134,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":451,"cvss_v4_0":9},{"baseScore":446,"baseSeverity":452,"vectorString":447,"impactScore":448,"exploitabilityScore":449},"MEDIUM",{"source":127,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":454,"cvss_v4_0":9},{"baseScore":125,"baseSeverity":455,"vectorString":128,"impactScore":448,"exploitabilityScore":456},"HIGH",10,[458,473,481],{"ecosystem":459,"name":460,"vendor":459,"product":460,"cpe_part":9,"purl_type":461,"purl_namespace":9,"purl_name":460,"source":9,"versions":462},"Npm","serialize-javascript","npm",[463,469],{"version":464,"is_range":465,"range_type":466,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":468,"fixed_in":9},"lt7_0_5",true,"semver","7.0.5","excluding",{"version":470,"is_range":465,"range_type":466,"version_start":471,"version_start_type":472,"version_end":467,"version_end_type":468,"fixed_in":9},"gte5_0_0_lt7_0_5","5.0.0","including",{"ecosystem":9,"name":474,"vendor":475,"product":474,"cpe_part":476,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":477},"serialize","yahoo","a",[478],{"version":479,"is_range":465,"range_type":480,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":468,"fixed_in":9},"lt7.0.5","cpe",{"ecosystem":9,"name":460,"vendor":475,"product":460,"cpe_part":476,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":482},[483],{"version":484,"is_range":465,"range_type":134,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":468,"fixed_in":9},"\u003C 7.0.5"]