CyberRota Analysis
AI-GeneratedSvelteKit versions 2.49.0 to 2.52.1 with experimental remote functions and forms enabled are vulnerable to a CPU exhaustion issue due to improper handling of malformed form data. This can lead to denial of service as the server becomes unresponsive while processing the malicious input. Organizations using these specific versions should prioritize updating to version 2.52.2 to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SvelteKit (@sveltejs/kit) versions >=2.49.0 and <=2.52.1 with experimental remote functions and form enabled contain a CPU exhaustion vulnerability in form deserialization. An attacker can send malformed form data to cause the server to become unresponsive while processing the request, resulting in denial of service. Fixed in 2.52.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)