En bref
- CVE-2026-82256 est une vulnérabilité MOYENNE (CVSS 5.3) touchant sveltekit (svelte), @sveltejs/kit.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.42%, plus élevée que 36.6% des vulnérabilités.
- Correctif : mettre à jour vers 2.69.1 ou plus récent.
Description
Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.
NVD description
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free