6 matches found
CVE-2026-40073
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODYSIZELIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers...
CVE-2026-40073
creationtimestamp| type| source ---|---|--- 2026-04-10 18:13:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5wg7dchc2z 2026-04-10 19:31:07+00:00| published-proof-of-concept| Telegram/KfGKsJKmMisviQyzRxPu6tVP9UplbeA33H-GctVC-uIg4Q...
@alexaegis/svelte-config (>=0.9.2, <=0.15.0), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +17 more potentially affected by CVE-2026-40073 via @sveltejs/kit (>=2.0.0, <=2.55.0)
@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =0.4.1, =5.0.0-alpha.1, =0.0.1, =1.0.1-next.0, =0.0.10, =1.0.54 and more Source cves: CVE-2026-40073 Source advisory: SNYK:JS-SVELTEJSKIT-15967891...
@alexaegis/svelte-config (>=0.9.2, <=0.15.0), @builders-of-stuff/svelte-sui-wallet-adapter (>=0.7.5, <=2.1.0) +17 more potentially affected by CVE-2026-40073 via @sveltejs/kit (>=2.0.0, <=2.55.0)
@sveltejs/kit NPM version =2.0.0, =0.9.2, =0.7.5, =0.0.137, =0.0.0-52469075, =39.2.3, =10.0.1, =0.1.0, =0.0.1-alpha.26, =0.4.1, =5.0.0-alpha.1, =0.0.1, =1.0.1-next.0, =0.0.10, =1.0.54 and more Source cves: CVE-2026-40073 Source advisory: OSV:GHSA-2CRG-3P73-43XP...
CVE-2026-40073
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODYSIZELIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers...
CVE-2026-40073 SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODYSIZELIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers...