6.3
Moyenne
CVE-2026-30226 Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
Description
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job. In devalue v5.6.3 and earlier, devalue.parse and devalue.unflatten were susceptible to prototype pollution via maliciously crafted payloads. Successful exploitation could lead to Denial of Service (DoS) or type confusion. This vulnerability is fixed in 5.6.4.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| devalue 5.6 | premières → < 5.6.4 | 5.6.4 |
Autres CVE de devalue
Les 7 CVE de devalue →
CVE-2026-92708
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
7.5
Élevée
CVE-2026-81176
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
5.3
Moyenne
CVE-2026-42570
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
7.5
Élevée
CVE-2026-22775
Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for…
7.5
Élevée