AIKIDO-2026-830881

TL;DR

AbortSignalPlugin.deserialize in seroval-plugins passes a deserialized reference table value to PROMISE_TO_ABORT_SIGNAL as a Promise without checking that it is one, and that helper calls promise.then(abort, abort) synchronously during fromJSON. A crafted Reference node that points at an application object with a then method causes that method to run during deserialization. That then method only receives seroval's own bound AbortController.abort, so the impact is weaker than the ReadableStream and Promise resolver confusion in the same package. The fix checks that the value is an actual Promise before calling then on it.