VendorsSveltekitall versions
Vulnerabilities

Svelte Kit (@sveltejs/kit)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-67647
SvelteKit Denial of service and possible SSRF when using prerendering
Published 2026-01-15 · Analyzed
9.1EPSS 0.005
CVE-2026-22803
SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer
Published 2026-01-15 · Analyzed
8.2EPSS 0.006
CVE-2026-40073
SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
Published 2026-04-10 · Analyzed
8.2EPSS 0.005
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
Published 2024-01-24 · Modified
7.5EPSS 0.008
CVE-2026-40074
SvelteKit's invalidated redirect in handle hook causes Denial-of-Service
Published 2026-04-10 · Analyzed
7.5EPSS 0.004