MEDIUM 5.3
GHSA-wqjv-9729-c5q2
SvelteKit: Big remote form function payloads can cause Node process to crash
Quick fix
GHSA-wqjv-9729-c5q2 — @sveltejs/kit: upgrade to the fixed version with the command below.
npm install @sveltejs/kit@2.69.1Details
Big remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q2 [WEB]
- https://github.com/sveltejs/kit/pull/16219 [WEB]
- https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c64582 [WEB]
- https://github.com/sveltejs/kit [PACKAGE]
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1 [WEB]
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7 [WEB]