sveltejs vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20244
3. 20252
4. 202640

Newest CVEs

• CVE-2026-123569

  Devalue before 5.6.3 Denial of Service via Sparse Array Serialization

  sveltejs · devalue

  High8.7
• CVE-2026-123568

  Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output

  sveltejs · devalue

  Low2.1
• CVE-2026-123567

  Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten

  sveltejs · devalue

  Medium6.3
• CVE-2026-123566

  Devalue before 5.9.3 CPU Amplification Denial of Service via uneval

  sveltejs · devalue

  High8.7
• CVE-2026-123565

  Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval

  sveltejs · devalue

  High8.7
• CVE-2026-123564

  Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays

  sveltejs · devalue

  High8.7
• CVE-2026-123563

  Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse

  sveltejs · devalue

  High8.7
• CVE-2026-123562

  Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection

  sveltejs · devalue

  High8.7
• CVE-2026-123561

  Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion

  sveltejs · devalue

  Medium6.3
• CVE-2026-114063

  SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows

  sveltejs · kit

  High8.7