tocsin

CVE-2024-23641

2 advisories.

npm/@sveltejs/kit CVE-2024-23641: high 7.5

Sending a GET or HEAD request with a body crashes SvelteKit

Action: Upgrade @sveltejs/kit to 2.4.3 or later.

npm i @sveltejs/kit@2.4.3

Affected

introducedfixedlast affected
2.0.02.4.3-

Fixed versions

2.4.3

Sources

CVE-2024-23641 · published · modified · JSON

npm/@sveltejs/adapter-node CVE-2024-23641: high 7.5

Sending a GET or HEAD request with a body crashes SvelteKit

Action: Upgrade @sveltejs/adapter-node to 2.1.2 or later.

npm i @sveltejs/adapter-node@2.1.2
npm i @sveltejs/adapter-node@3.0.3
npm i @sveltejs/adapter-node@4.0.1

Affected

introducedfixedlast affected
2.0.02.1.2-
3.0.03.0.3-
4.0.04.0.1-

Fixed versions

2.1.23.0.34.0.1

Sources

CVE-2024-23641 · published · modified · JSON