sveltejs devalue vulnerabilities
16 published CVEs name sveltejs devalue among the affected products.
- 16Published CVEs16 of them scored
- 15Last 12 monthspublished in the last year
- 0Critical11 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-123569
Devalue before 5.6.3 Denial of Service via Sparse Array Serialization
sveltejs · devalue
High8.7 - CVE-2026-123568
Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output
sveltejs · devalue
Low2.1 - CVE-2026-123567
Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten
sveltejs · devalue
Medium6.3 - CVE-2026-123566
Devalue before 5.9.3 CPU Amplification Denial of Service via uneval
sveltejs · devalue
High8.7 - CVE-2026-123565
Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval
sveltejs · devalue
High8.7 - CVE-2026-123564
Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays
sveltejs · devalue
High8.7 - CVE-2026-123563
Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse
sveltejs · devalue
High8.7 - CVE-2026-123562
Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection
sveltejs · devalue
High8.7 - CVE-2026-123561
Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion
sveltejs · devalue
Medium6.3 - CVE-2026-92708
devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers
sveltejs · devalue
High7.5