漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SvelteKit Denial of service and possible SSRF when using prerendering
Vulnerability Description
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.49.5, SvelteKit is vulnerable to a server side request forgery (SSRF) and denial of service (DoS) under certain conditions. From 2.44.0 through 2.49.4, the vulnerability results in a DoS when your app has at least one prerendered route (export const prerender = true). From 2.19.0 through 2.49.4, the vulnerability results in a DoS when your app has at least one prerendered route and you are using adapter-node without a configured ORIGIN environment variable, and you are not using a reverse proxy that implements Host header validation. This vulnerability is fixed in 2.49.5.
CVSS Information
N/A
Vulnerability Type
未捕获的异常
Vulnerability Title
SvelteKit 代码问题漏洞
Vulnerability Description
SvelteKit是Svelte开源的一套Web 开发框架。 SvelteKit 2.49.5之前版本存在代码问题漏洞，该漏洞源于特定条件下存在缺陷，可能导致服务器端请求伪造和拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A