Sveltejs Devalue vulnerabilities

• sveltejs devalue Devalue before 5.6.3 Denial of Service via Sparse Array Serialization CVE-2026-123569 8.7 HighNovember 8, 2026
• sveltejs devalue Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output CVE-2026-123568 2.1 LowNovember 8, 2026
• sveltejs devalue Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten CVE-2026-123567 6.3 MediumNovember 8, 2026
• sveltejs devalue Devalue before 5.9.3 CPU Amplification Denial of Service via uneval CVE-2026-123566 8.7 HighNovember 8, 2026
• sveltejs devalue Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval CVE-2026-123565 8.7 HighNovember 8, 2026
• sveltejs devalue Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays CVE-2026-123564 8.7 HighNovember 8, 2026
• sveltejs devalue Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse CVE-2026-123563 8.7 HighNovember 8, 2026
• sveltejs devalue Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection CVE-2026-123562 8.7 HighNovember 8, 2026
• sveltejs devalue Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion CVE-2026-123561 6.3 MediumNovember 8, 2026
• sveltejs devalue devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers CVE-2026-92708 Fix available 7.5 HighSeptember 18, 2026
• svelte devalue, red hat build of podman desktop, enterprise linux 10 +1 more +3 more Svelte devalue: DoS via sparse array deserialization CVE-2026-42570 Fix available 7.5 HighMay 14, 2026
• svelte devalue devalue has prototype pollution in devalue.parse and devalue.unflatten CVE-2026-30226 Fix available 6.3 MediumMarch 11, 2026
• sveltejs devalue Svelte devalue: DoS via malformed input CVE-2026-81176 Fix available 5.3 MediumFebruary 19, 2026
• svelte devalue, red hat build of podman desktop - tech preview, trusted artifact signer 1.2 +1 more +3 more devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse CVE-2026-22775 Fix available 7.5 HighJanuary 15, 2026
• svelte devalue, red hat build of podman desktop - tech preview, trusted artifact signer 1.2 +1 more +3 more devalue vulnerable to denial of service due to memory exhaustion in devalue.parse CVE-2026-22774 Fix available 7.5 HighJanuary 15, 2026
• sveltejs devalue Svelte devalue vulnerable to prototype pollution CVE-2025-57820 Fix available 7.9 HighAugust 26, 2025