logo

Database

Asymmetric denial of service - ReDoS In @sveltejs/kit

Description

SvelteKit: Big remote form function payloads can cause Node process to crash Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. GHSA-wqjv-9729-c5q22. GCVE-GHSA-wqjv-9729-c5q2

References

1. https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q22. https://github.com/sveltejs/kit/pull/162193. https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c645824. https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]5. https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.