{"id":"GHSA-wqjv-9729-c5q2","title":"SvelteKit: Big remote form function payloads can cause Node process to crash","summary":"SvelteKit: Big remote form function payloads can cause Node process to crash","severity":"medium","cvss":5.3,"cwe":["CWE-248"],"vendor":"sveltejs","product":"@sveltejs/kit","ecosystem":"npm","affected":["@sveltejs/kit <= 2.69.0"],"patched":["@sveltejs/kit 2.69.1"],"published":"2026-07-24","updated":"2026-07-24","source":"GHSA","sourceUrl":"https://github.com/advisories/GHSA-wqjv-9729-c5q2","references":[{"url":"https://github.com/sveltejs/kit/security/advisories/GHSA-wqjv-9729-c5q2"},{"url":"https://github.com/sveltejs/kit/pull/16219"},{"url":"https://github.com/sveltejs/kit/commit/82b0370c793ac392cee5c2e28f4b8fed09c64582"},{"url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.69.1"},{"url":"https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@3.0.0-next.7"},{"url":"https://github.com/advisories/GHSA-wqjv-9729-c5q2"}],"tags":["ghsa","npm"],"ingestedAt":"2026-07-24T16:33:09.778Z","slug":"GHSA-wqjv-9729-c5q2","body":"## Overview\n\nBig remote form function payloads can cause the Node process to crash. Doing this repeatedly can cause DoS.\n\n## Affected packages\n\n- `@sveltejs/kit <= 2.69.0`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `@sveltejs/kit 2.69.1`","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}