CVE-2026-34043

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service (DoS) vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object (an object that inherits from Array.prototype but has a very large length property), the process enters an intensive loop that consumes 100% CPU and hangs indefinitely. This issue has been patched in version 7.0.5.

• CWE-400
• CWE-834

• https://github.com/yahoo/serialize-javascript/commit/f147e90269b58bb6e539cfdf3d0e20d6ad14204bPatch
• https://github.com/yahoo/serialize-javascript/releases/tag/v7.0.5Release Notes
• https://github.com/yahoo/serialize-javascript/security/advisories/GHSA-qj8w-gfj5-8c6vVendor Advisory

Published

Mar 31, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34037Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-34038Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-3404A flaw has been found in thinkgem JeeSite up to 5.15.1. Impa…8.1
• CVE-2026-34040Moby is an open source container framework. Prior to version…7.8
• CVE-2026-34041act is a project which allows for local running of github ac…9.8
• CVE-2026-34042act is a project which allows for local running of github ac…8.2
• CVE-2026-34044Coolify is an open-source and self-hostable tool for managin…7.7
• CVE-2026-34045Podman Desktop is a graphical tool for developing on contain…9.1
• CVE-2026-34046Langflow is a tool for building and deploying AI-powered age…8.8
• CVE-2026-34047Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-34048Coolify is an open-source and self-hostable tool for managin…9.9
• CVE-2026-34049Coolify is an open-source and self-hostable tool for managin…3.3