TI-2026-30850 CVE-2026-42570 · GHSA-77vg-94rm-hx3p
Svelte devalue: DoS via sparse array deserialization
Priority LOW 39
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.
Vulnerabilities
4 records
TI-2026-23459 CVE-2026-30226 · GHSA-cfw5-2vxh-hr84
devalue has prototype pollution in devalue.parse and devalue.unflatten
Priority LOW 28
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.
TI-2026-18293 CVE-2026-22775 · GHSA-g2pg-6438-jwpf
devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
Priority MEDIUM 40
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.
TI-2026-18292 CVE-2026-22774 · GHSA-vw5p-8cq8-m7mv
devalue vulnerable to denial of service due to memory exhaustion in devalue.parse
Priority MEDIUM 40
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.