SvelteKit: Big remote form function payloads can cause Node process to crash
Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-82256US | medium5.3 | — | ||
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/sveltejs/kitPACKAGE
- https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c64582WEB
- https://github.com/sveltejs/kit/pull/16219WEB
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1WEB
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7WEB
- https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q2WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan