GHSA-wqjv-9729-c5q2

Source

https://github.com/advisories/GHSA-wqjv-9729-c5q2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-wqjv-9729-c5q2/GHSA-wqjv-9729-c5q2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-wqjv-9729-c5q2

Aliases

CVE-2026-82256

Published

2026-07-24T15:50:40Z

Modified

2026-08-29T03:55:37Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Summary

SvelteKit: Big remote form function payloads can cause Node process to crash

Details

Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

Database specific

{
    "cwe_ids":  [
        "CWE-248"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-07-24T15:50:40Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

npm / @sveltejs/kit

Package

Name: @sveltejs/kit; View open source insights on deps.dev
Purl: pkg:npm/%40sveltejs/kit

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.69.1

Database specific

last_known_affected_version_range

"<= 2.69.0"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/07/GHSA-wqjv-9729-c5q2/GHSA-wqjv-9729-c5q2.json"