GHSA-6vcg-8g2h-w2hg

Facts

Severity

High

Affected versions (serialize)

<= 1.15.0As entered by the maintainer. Not reviewed.

Fixed in (serialize)

1.16.0

Affected versions (serialize.c)

<= 1.8.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.c)

1.9.0

Affected versions (serialize.cs)

<= 1.8.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.cs)

1.9.0

Affected versions (serialize.go)

<= 1.14.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.go)

1.15.0

Affected versions (serialize.rs)

<= 2.2.2As entered by the maintainer. Not reviewed.

Fixed in (serialize.rs)

2.3.0

Affected versions (serialize.js)

<= 1.3.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.js)

1.4.0

Affected versions (serialize.dart)

<= 1.0.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.dart)

1.1.0

Affected versions (serialize.java)

<= 1.0.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.java)

1.1.0

Affected versions (serialize.elixir)

<= 1.0.0As entered by the maintainer. Not reviewed.

Fixed in (serialize.elixir)

1.1.0

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-09-04 08:15 UTC

   Published by the maintainers

   No CVE cited

2. 2026-11-11 09:31 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Not expected

   Reviewed by GitHub

   GitHub doesn’t review this ecosystem

Machine-readable record: feed/GHSA-6vcg-8g2h-w2hg.json