sveltejs vulnerabilities
Every vulnerability this feed holds for sveltejs, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
9 vulnerabilities tracked.
- 8.7 The devalue package for npm before 5.6.3 can consume excessive CPU and memory when serializing sparse arrays with uneval or stringify.
- 8.7 Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by supplying…
- 8.7 Sveltejs devalue before 5.9.3 contains a resource exhaustion vulnerability where repeated primitive strings cause quadratic expansion in…
- 8.7 Sveltejs devalue from 1.0.0 before 5.9.3 contains a memory exhaustion flaw in uneval, whose generated code for sparse arrays allocates…
- 8.7 Devalue before 5.9.3 contains a validation bypass vulnerability that allows custom ArrayBuffer revivers to skip typed-array allocation…
- 8.7 devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing multiple…
- 6.3 Sveltejs devalue before 5.6.4 contains a prototype injection vulnerability that allows attackers to inject proto own properties into…
- 6.3 devalue before 5.9.3 allows malformed null-prototype object keys to bypass parse's proto rejection through property-key coercion, an…
- 2.1 Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by supplying…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that sveltejs is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Linux Red Hat Google Microsoft Apple IBM Apache Software Foundation zephyrproject n/a Oracle Corporation Unknown JetBrains Drupal Cisco Tanium go-vikunja Eclipse Foundation hickory-dns Samsung Semiconductor SuiteCRM wazuh HCL Software Gnome vercel