CVE-2026-82261
1 advisory.
npm/@sveltejs/kit CVE-2026-82261: medium, EPSS 0.49%
CPU exhaustion in SvelteKit remote form deserialization (experimental only)
Action: Upgrade @sveltejs/kit to 2.52.2 or later.
npm i @sveltejs/kit@2.52.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.49.0 | 2.52.2 | - |
Fixed versions
| 2.52.2 |
Sources
- osv: GHSA-88qp-p4qg-rqm6
- https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6
- https://github.com/sveltejs/kit/commit/3e607b314aec9e5f278d32847945b8b6323e1cb8
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.52.2
CVE-2026-82261 · published · modified · JSON