Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

kit — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in kit, with AI-generated Chinese analysis, references, and POCs.

Vendor: sveltejs

CVE IDTitleCVSSSeverityPublished
CVE-2026-40074 SvelteKit's invalidated redirect in handle hook causes Denial-of-Service CWE-755 6.5 -2026-04-10
CVE-2026-40073 SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node CWE-770 5.3 -2026-04-10
CVE-2026-27118 Cache poisoning in @sveltejs/adapter-vercel CWE-346 5.4AIMediumAI2026-02-20
CVE-2026-22803 SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer CWE-789 7.5AIHighAI2026-01-15
CVE-2025-67647 SvelteKit Denial of service and possible SSRF when using prerendering CWE-248 7.5AIHighAI2026-01-15
CVE-2025-32388 SvelteKit allows XSS via tracked search_params CWE-79 5.4 Medium2025-04-15
CVE-2024-53261 Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit CWE-79 6.1AIMediumAI2024-11-25
CVE-2024-53262 Unescaped error message included on error page in SvelteKit CWE-79 7.1AIHighAI2024-11-25
CVE-2024-23641 Sending a GET or HEAD request with a body crashes SvelteKit CWE-20 7.5 High2024-01-24
CVE-2023-29008 SvelteKit framework has Insufficient CSRF protection for CORS requests CWE-918 8.8 High2023-04-06
CVE-2023-29003 SvelteKit has Insufficient Cross-Site Request Forgery Protection CWE-352 8.8 High2023-04-04

All 11 known CVE vulnerabilities affecting kit with full Chinese analysis, references, and POCs where available.