CVE-2026-128119

The SvelteKit framework (versions 2.60.1 through 3.1.1 ) is vulnerable to a collision of identifiers for private query.batch functions when using the experimental remote functions flag. This root cause allows arguments intended for one function to be passed to another within a shared request batc...