CVE-2026-123568 | BDVDB-2026-401925 Detail
sveltejsdevalue
Description#
Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by supplying untrusted data to uneval. When the generated code is later evaluated, it creates objects with polluted prototypes, producing output data whose shape differs from the original input.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.