KI
Product
kit
16
CVEs
0
On KEV
9.1
Max CVSS
4
New 30D
Severity mix
Critical 1High 7Medium 8Low 0
Watch
Add kit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-114063 | 7.5 | Oct 21 | SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows Affected: 2.10.0 before 3.0.0 |
| CVE-2026-82261 | 7.5 | Aug 28 | SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization Affected: 2.49.0 before 2.52.1 |
| CVE-2026-82260 | 7.5 | Aug 28 | SvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserialization Affected: 2.49.0 before 2.52.1 |
| CVE-2026-82259 | 7.5 | Aug 28 | SvelteKit 2.49.0 before 2.53.3 Denial of Service via form Affected: 2.49.0 before 2.53.3 |
| CVE-2026-40074 | 7.5 | Apr 10 | SvelteKit's invalidated redirect in handle hook causes Denial-of-Service Affected: < 2.57.1 |
| CVE-2026-40073 | 7.5 | Apr 10 | SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node Affected: < 2.57.1 |
| CVE-2026-22803 | 7.5 | Jan 15 | SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer Affected: >= 2.49.0, < 2.49.5 |
Showing 7