CVE-2026-82257
1 advisory.
npm/@sveltejs/kit CVE-2026-82257: medium 4.3
SvelteKit: Prototype pollution in file input deletion path in remote-function forms
Action: Upgrade @sveltejs/kit to 2.69.1 or later.
npm i @sveltejs/kit@2.69.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.69.1 | - |
Fixed versions
| 2.69.1 |
Sources
- osv: GHSA-866w-xmhq-wj7x
- https://github.com/sveltejs/kit/security/advisories/GHSA-866w-xmhq-wj7x
- https://github.com/sveltejs/kit/pull/16218
- https://github.com/sveltejs/kit/commit/df32f6fe86cdd0b68b650e3e4631e5896453dcd3
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7
CVE-2026-82257 · published · modified · JSON