Rascals
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Rascals product.
RSS Feeds for Rascals security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Rascals products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Rascals Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 3 vulnerabilities in Rascals with an average score of 8.8 out of ten. Last year, in 2025 Rascals had 1 security vulnerability published. That is, 2 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 1.00
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 3 | 8.80 |
| 2025 | 1 | 9.80 |
It may take a day or so for new Rascals vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Rascals Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-25358 | Mar 25, 2026 |
Meloo <2.8.2: Deserialization Object Injection VulnerabilityDeserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2. |
Meloo
|
| CVE-2026-25359 | Mar 25, 2026 |
Pendulum <3.1.5 Deserialization Obj InjectionDeserialization of Untrusted Data vulnerability in rascals Pendulum pendulum allows Object Injection.This issue affects Pendulum: from n/a through < 3.1.5. |
Pendulum
|
| CVE-2026-25360 | Mar 25, 2026 |
Untrusted Data Deserialization in Vex <1.2.9 (Object Injection)Deserialization of Untrusted Data vulnerability in rascals Vex vex allows Object Injection.This issue affects Vex: from n/a through < 1.2.9. |
Vex
|
| CVE-2025-60039 | Oct 22, 2025 |
Deserialization of Untrusted Data in rascals Noisa <=2.6.0Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0. |
Noisa
|