VULNERABILITY INTELLIGENCE

CVE-2026-82256

CVSS score6.9 MEDIUM
EPSS probability0.42%
CISA KEVNot currently listed
Published2026-08-28
Last modified2026-10-08
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Description

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references