- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, devalue recorded 2 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of devalue and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-123569Devalue before 5.6.3 Denial of Service via Sparse Array SerializationCVE-2026-123568Sveltejs devalue before 5.6.3 Prototype Pollution via uneval OutputCVE-2026-123567Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflattenCVE-2026-123566Devalue before 5.9.3 CPU Amplification Denial of Service via unevalCVE-2026-123565Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-123569Devalue before 5.6.3 Denial of Service via Sparse Array Serialization | Exploitation statusNot confirmed | FixYes |
| SeverityHigh |
CVE-2026-123568Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityLow |
|---|
CVE-2026-123567Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-123566Devalue before 5.9.3 CPU Amplification Denial of Service via uneval | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123565Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123564Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123563Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123562Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
|---|
CVE-2026-123561Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
|---|
CVE-2026-92708devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-81176Svelte devalue: DoS via malformed input | Exploitation statusNot exploited | FixYes | Published09/16/2026 | SeverityMedium |
|---|
CVE-2026-42570Svelte devalue: DoS via sparse array deserialization | Exploitation statusNot exploited | FixYes | Published06/09/2026 | SeverityHigh |
|---|
CVE-2026-30226devalue has prototype pollution in devalue.parse and devalue.unflatten | Exploitation statusNot exploited | FixYes | Published03/11/2026 | SeverityMedium |
|---|
CVE-2026-22775devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse | Exploitation statusNot exploited | FixYes | Published01/15/2026 | SeverityHigh |
|---|
CVE-2026-22774devalue vulnerable to denial of service due to memory exhaustion in devalue.parse | Exploitation statusNot exploited | FixYes | Published01/15/2026 | SeverityHigh |
|---|
CVE-2025-57820Svelte devalue vulnerable to prototype pollution | Exploitation statusNot exploited | FixYes | Published08/26/2025 | SeverityHigh |
|---|
7 Results | Page 1 of 1