| Package | Affected versions | Patched versions |
|---|---|---|
| sveltekit | ≥ 2.49.0, < 2.52.2 | 2.52.2 |
| @sveltejs/kit | ≥ 2.49.0, < 2.52.2 | 2.52.2 |
Versions of @sveltejs/kit prior to 2.52.2 with remote functions enabled are vulnerable to CPU exhaustion. Malformed form data can cause the server to become unresponsive while processing a request, resulting in denial of service.
Only applications using both experimental.remoteFunctions and form are vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free