Allocation of Resources Without Limits or Throttling

Overview @sveltejs/kit is a SvelteKit framework and CLI Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the deserializebinaryform function in the remote form handler. An attacker can exhaust application resources by sending crafted bina...

Memory Allocation with Excessive Size Value

Overview @sveltejs/kit is a SvelteKit framework and CLI Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the deserializebinaryform function via Remote Form endpoint. An attacker can cause excessive memory allocation by sending a specially crafted...

GHSA-VW5M-QW2R-M923 Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

CVE-2021-45690

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

PT-2021-24266

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: The issue in the messagepack-rs crate allows functions such as deserialize binary, deserialize string, deserialize extension others, and deserialize string primitive to read from...

PT-2021-24265

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue was discovered in the messagepack-rs crate where certain functions may read from uninitialized memory locations, leading to undefined behavior. The affected functions include...

PT-2021-24264

Name of the Vulnerable Software and Affected Versions: messagepack-rs crate through 2021-01-26 Description: An issue in the messagepack-rs crate allows it to read from uninitialized memory locations during deserialization. This affects functions such as deserialize binary, deserialize string,...