{"action":"Upgrade @sveltejs/kit to 2.69.1 or later.","affected":[{"fixed":"2.69.1","introduced":"0"}],"component":"@sveltejs/kit","cve_ids":["CVE-2026-82256"],"ecosystem":"npm","epss":0.00423,"exploited":false,"fixed_versions":["2.69.1"],"ghsa_id":"GHSA-wqjv-9729-c5q2","id":"tcs_01M5KGFRS2YM6DT26MYAEA4QB7","modified_at":"2026-08-29T03:55:37.098488579Z","published_at":"2026-07-24T15:50:40Z","references":["https://osv.dev/vulnerability/GHSA-wqjv-9729-c5q2","https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q2","https://github.com/sveltejs/kit/pull/16219","https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c64582","https://github.com/sveltejs/kit","https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1","https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-wqjv-9729-c5q2","url":"https://osv.dev/vulnerability/GHSA-wqjv-9729-c5q2"}],"summary":"SvelteKit: Big remote form function payloads can cause Node process to crash"}