En resumen
- CVE-2026-82256 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a sveltekit (svelte), @sveltejs/kit.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.42%, mayor que el 36.6% de las vulnerabilidades.
- Solución: actualizar a 2.69.1 o posterior.
Description
Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.
NVD description
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free