Skip to content
Threat Feed
Subscribe

Vendor

Svelte

2 briefs RSS
medium advisory

Uncontrolled Resource Consumption in devalue Serialization

The devalue package for Node.js is vulnerable to a denial-of-service attack where specially crafted input causes quadratic string expansion during the serialization process, leading to memory and CPU exhaustion.

devalue denial-of-service npm supply-chain
1t
low advisory

Denial of Service Vulnerability in SvelteKit

SvelteKit versions 2.49.0 through 2.53.2 are susceptible to a denial-of-service attack due to a deserialization expansion issue in the experimental remote functions feature.

SvelteKit +1
1c