KI
Product
Kit
by Svelte · last CVE Apr 10, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 0Low 0
Watch

Add Kit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40074
7.5
0%
Apr 10
SvelteKit's invalidated redirect in handle hook causes Denial-of-Service
Affected: before 2.57.1
CVE-2026-40073
7.5
1%
Apr 10
SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
Affected: before 2.57.1
CVE-2026-22803
7.5
1%
Jan 15
SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer
Affected: 2.49.0 before 2.49.5
CVE-2024-23641
7.5
1%
Jan 24
SvelteKit is a web development kit
Affected: 2.0.0 before 2.4.3
Showing 4