Login Request a demo
KI
Product
Kit
by Svelte · last CVE Apr 10, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 4Medium 0Low 0
Severity
All severities5Critical1High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Kit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-67647
9.1
1%
Jan 15
SvelteKit Denial of service and possible SSRF when using prerendering
Affected: 2.19.0 before 2.49.5
CVE-2026-40074
7.5
0%
Apr 10
SvelteKit's invalidated redirect in handle hook causes Denial-of-Service
Affected: before 2.57.1
CVE-2026-40073
7.5
1%
Apr 10
SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
Affected: before 2.57.1
CVE-2026-22803
7.5
1%
Jan 15
SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer
Affected: 2.49.0 before 2.49.5
CVE-2024-23641
7.5
1%
Jan 24
SvelteKit is a web development kit
Affected: 2.0.0 before 2.4.3
Showing 5