| CVE-2026-123569 |
Devalue before 5.6.3 Denial of Service via Sparse Array Serialization
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123568 |
Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output
|
2.1
Low
|
Nov 8, 2026 |
| CVE-2026-123566 |
Devalue before 5.9.3 CPU Amplification Denial of Service via uneval
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123567 |
Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten
|
6.3
Medium
|
Nov 8, 2026 |
| CVE-2026-123565 |
Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123563 |
Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123564 |
Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123562 |
Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection
|
8.7
High
|
Nov 8, 2026 |
| CVE-2026-123561 |
Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion
|
6.3
Medium
|
Nov 8, 2026 |
| CVE-2026-92708 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
High
|
Sep 18, 2026 |
| CVE-2026-81176 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
5.3
Medium
|
Sep 16, 2026 |
| CVE-2026-42570 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
High
|
Jun 9, 2026 |
| CVE-2026-30226 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
6.3
Medium
|
Mar 11, 2026 |
| CVE-2026-22775 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
High
|
Jan 15, 2026 |
| CVE-2026-22774 |
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
|
7.5
High
|
Jan 15, 2026 |
| CVE-2025-57820 |
Svelte devalue is a utility library
|
7.9
High
|
Aug 26, 2025 |