CVE-2026-82260 in SvelteKit
Zusammenfassung
von MITRE • 28.08.2026
SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process and resulting in denial of service. Fixed in 2.52.2.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.