CVE-2026-82256
1 advisory.
npm/@sveltejs/kit CVE-2026-82256: medium 5.3
SvelteKit: Big remote form function payloads can cause Node process to crash
Action: Upgrade @sveltejs/kit to 2.69.1 or later.
npm i @sveltejs/kit@2.69.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.69.1 | - |
Fixed versions
| 2.69.1 |
Sources
- osv: GHSA-wqjv-9729-c5q2
- https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q2
- https://github.com/sveltejs/kit/pull/16219
- https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c64582
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7
CVE-2026-82256 · published · modified · JSON