SvelteKit (2.49.0 - 2.52.1)

SvelteKit versions 2.49.0 through 2.53.2 are susceptible to a denial-of-service attack due to a deserialization expansion issue in the experimental remote functions feature.