Devalue
Svelte · 4 CVEs
CVE-2026-42570
HIGH
Svelte devalue: DoS via sparse array deserialization
Jun 9, 2026
CVE-2026-30226
MEDIUM
devalue has prototype pollution in devalue.parse and devalue.unflatten
Mar 11, 2026
CVE-2026-22775
HIGH
devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
Jan 15, 2026
CVE-2026-22774
HIGH
devalue vulnerable to denial of service due to memory exhaustion in devalue.parse
Jan 15, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-42570 | Svelte devalue: DoS via sparse array deserialization | HIGH | 0.72% | Jun 9, 2026 |
| CVE-2026-30226 | devalue has prototype pollution in devalue.parse and devalue.unflatten | MEDIUM | 0.50% | Mar 11, 2026 |
| CVE-2026-22775 | devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse | HIGH | 0.64% | Jan 15, 2026 |
| CVE-2026-22774 | devalue vulnerable to denial of service due to memory exhaustion in devalue.parse | HIGH | 0.64% | Jan 15, 2026 |
Showing 1 to 4 of 4 CVEs