| CVE-2026-123569 |
Devalue before 5.6.3 Denial of Service via Sparse Array Serialization
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123568 |
Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output
|
2.1
Faible
|
8 nov. 2026 |
| CVE-2026-123566 |
Devalue before 5.9.3 CPU Amplification Denial of Service via uneval
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123567 |
Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten
|
6.3
Moyenne
|
8 nov. 2026 |
| CVE-2026-123565 |
Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123563 |
Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123564 |
Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123562 |
Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection
|
8.7
Élevée
|
8 nov. 2026 |
| CVE-2026-123561 |
Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion
|
6.3
Moyenne
|
8 nov. 2026 |
| CVE-2026-92708 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
Élevée
|
18 sept. 2026 |
| CVE-2026-81176 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
5.3
Moyenne
|
16 sept. 2026 |
| CVE-2026-42570 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
Élevée
|
9 juin 2026 |
| CVE-2026-30226 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
6.3
Moyenne
|
11 mars 2026 |
| CVE-2026-22775 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
Élevée
|
15 janv. 2026 |
| CVE-2026-22774 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
Élevée
|
15 janv. 2026 |
| CVE-2025-57820 |
Svelte devalue is a utility library
|
7.9
Élevée
|
26 août 2025 |