SvelteKit: Big remote form function payloads can cause Node process to crash

보통 5.3CVE-2026-82256 · GHSA-wqjv-9729-c5q2 · Published 28/08/2026 · updated 08/10/2026

요약

CVE-2026-82256은(는) sveltekit (svelte), @sveltejs/kit에 영향을 주는 보통 (CVSS 5.3) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.42%, 전체 취약점의 36.6%보다 높음.
조치: 2.69.1 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
sveltekit svelte	`< 2.69.1`	`2.69.1`
@sveltejs/kit npm	`< 2.69.1`	`2.69.1`

Description

Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

NVD description

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.

References

sveltejs/kit security advisory · WEB
sveltejs/kit#16219 · WEB
sveltejs/kit commit 82b0370 · WEB
sveltejs/kit · PACKAGE
sveltejs/kit release @sveltejs · WEB
sveltejs/kit release @sveltejs · WEB
vulncheck.com/advisories/sveltekit-before-2.69.1-denial-of-service-via-remote-form · Third Party Advisory

sveltekit의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sveltekit

svelte

< 2.69.1

2.69.1

@sveltejs/kit

npm

< 2.69.1

2.69.1

Description

Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

NVD description

sveltekit의 다른 취약점

모두 보기 →