CyberRota Analysis
AI-GeneratedSvelteKit versions 2.49.0 to 2.52.1 with experimental remote functions enabled are vulnerable to a memory exhaustion issue due to improper handling of malformed form data, leading to excessive memory allocation and potential server crashes. This vulnerability can result in a denial of service, impacting the availability of applications built with SvelteKit. Developers and organizations using affected versions should prioritize upgrading to version 2.52.2 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions (experimental.remoteFunctions) and form enabled contain a memory exhaustion vulnerability in remote form deserialization. Malformed form data can cause excessive memory allocation, crashing the server process and resulting in denial of service. Fixed in 2.52.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)