Описание
SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process and resulting in denial of service. Fixed in 2.52.2.
Уязвимые конфигурации
Конфигурация 1Версия от 2.49.0 (включая) до 2.52.2 (исключая)
cpe:2.3:a:svelte:sveltekit:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 28%
0.00343
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
github
21 день назад
SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process and resulting in denial of service. Fixed in 2.52.2.
EPSS
Процентиль: 28%
0.00343
Низкий
7.5 High
CVSS3
Дефекты
CWE-400