Vulnerability GHSA-wqjv-9729-c5q2
Medium Risk
MEDIUM RISK
CVSS Score: 5.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
3 months ago
July 24, 2026 at 03:50 PM UTC
SvelteKit: Big remote form function payloads can cause Node process to crash
<2.69.1
<2.69.1
Summary
SvelteKit: Big remote form function payloads can cause Node process to crash
Details
Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
21 days ago
SvelteKit: URL redirection to untrusted site via enhanced form submission
<3.0.0 GHSA-pfhg-q3qv-9q6r
<3.0.0 GHSA-pfhg-q3qv-9q6r
Low Risk
21 days ago
SvelteKit : XSS via untrusted cache-control header in prerendered page
<3.0.0 GHSA-27mw-82g8-phjj
<3.0.0 GHSA-27mw-82g8-phjj
Medium Risk
3 months ago
SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
<2.70.2 GHSA-29g2-3rmr-qm68
<2.70.2 GHSA-29g2-3rmr-qm68
Medium Risk
3 months ago
SvelteKit: Prototype pollution in file input deletion path in remote-function forms
<2.69.1 GHSA-866w-xmhq-wj7x
<2.69.1 GHSA-866w-xmhq-wj7x
Medium Risk
5 months ago
@sveltejs/kit: `query.batch` cross-talk
>=2.38.0 <2.60.1 GHSA-hgv7-v322-mmgr
>=2.38.0 <2.60.1 GHSA-hgv7-v322-mmgr
Impacted packages
Timeline
Published
3 months ago
July 24, 2026 at 03:50 PM UTC
Fixed (2.69.1)
4 months ago
July 02, 2026 at 09:49 PM UTC
Last Modified
2 months ago
August 29, 2026 at 03:55 AM UTC