What’s Vulnerable › Products
sveltejs devalue vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your sveltejs devalue version is affected
Latest sveltejs devalue vulnerabilities
- CVE-2026-92708 — devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers (CVSS 7.5)
- CVE-2026-81176 — Svelte devalue: DoS via malformed input (CVSS 5.3)
- CVE-2026-42570 — Svelte devalue: DoS via sparse array deserialization (CVSS 7.5)
- CVE-2026-30226 — devalue has prototype pollution in devalue.parse and devalue.unflatten (CVSS 7.5)
- CVE-2026-22775 — devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse (CVSS 7.5)
- CVE-2026-22774 — devalue vulnerable to denial of service due to memory exhaustion in devalue.parse (CVSS 7.5)
- CVE-2025-57820 — Svelte devalue vulnerable to prototype pollution (CVSS 7.9)