Vendor
SvelteKit versions 2.49.0 through 2.53.2 are susceptible to a denial-of-service attack due to a deserialization expansion issue in the experimental remote functions feature.