Beveiligingsadvies

CVE-2026-82260

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 10:49:43
Laatst bijgewerkt 2026-08-28 15:52:30
Toegewezen door VulnCheck
CVSS-score 8.7
Status PUBLISHED

Beschrijving

SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process and resulting in denial of service. Fixed in 2.52.2.