UNKNOWN npm
CPU exhaustion in SvelteKit remote form deserialization (experimental only)
GHSA-88qp-p4qg-rqm6
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Versions of @sveltejs/kit prior to 2.52.2 with remote functions enabled are vulnerable to CPU exhaustion. Malformed form data can cause the server to become unresponsive while processing a request, resulting in denial of service.
Only applications using both experimental.remoteFunctions and form are vulnerable.
Ready to move
Start Securing
Free, no credit card | First findings in minutes