Improper resource allocation In @sveltejs/kit
Description
Memory exhaustion in SvelteKit remote form deserialization (experimental only)
Versions of @sveltejs/kit prior to 2.52.2 with remote functions enabled can be vulnerable to memory exhaustion. Malformed form data can cause the server process to crash due to excessive memory allocation, resulting in denial of service.
Only applications using both experimental.remoteFunctions and form are vulnerable.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 2.52.2 |
Aliases
1. 2.
References
1. 2. 3.