Aller au contenu
en Se connecter
7.9 Élevée

CVE-2025-57820 Svelte devalue is a utility library

Description

Svelte devalue is a utility library. Prior to version 5.3.2, a string passed to devalue.parse could represent an object with a __proto__ property and devalue.parse does not check that an index is numeric. This could result in assigning prototypes to objects and properties, leading to prototype pollution. This issue has been fixed in version 5.3.2

Produits et versions touchés

Produit Versions touchées Corrigé en
devalue 5.3 premières → < 5.3.2 5.3.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de devalue

Les 7 CVE de devalue →
CVE-2026-92708 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for… 7.5 Élevée CVE-2026-81176 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for… 5.3 Moyenne CVE-2026-42570 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for… 7.5 Élevée CVE-2026-30226 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for… 6.3 Moyenne
Suivre cette CVE