CVE-2025-62381
1 advisory.
npm/sveltekit-superforms CVE-2025-62381: high, EPSS 0.73%
`sveltekit-superforms` has Prototype Pollution in `parseFormData` function of `formData.js`
Action: Upgrade sveltekit-superforms to 2.27.4 or later.
npm i sveltekit-superforms@2.27.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.27.4 | - |
Fixed versions
| 2.27.4 |
Sources
- osv: GHSA-hwmc-4c8j-xxj7
- https://github.com/ciscoheat/sveltekit-superforms/security/advisories/GHSA-hwmc-4c8j-xxj7
- https://nvd.nist.gov/vuln/detail/CVE-2025-62381
- https://github.com/ciscoheat/sveltekit-superforms/commit/4a1310dd1a94176bb22036662c530dad48059ca4
- https://github.com/ciscoheat/sveltekit-superforms
CVE-2025-62381 · published · modified · JSON