← All credits

elliott-with-the-longest-name-on-github

13 vulnerability records and advisories credit this contributor.

CVE-2026-123566

Devalue before 5.9.3 CPU Amplification Denial of Service via uneval

CVE-2026-123562

Devalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled Rejection

CVE-2026-123569

Devalue before 5.6.3 Denial of Service via Sparse Array Serialization

CVE-2026-123568

Sveltejs devalue before 5.6.3 Prototype Pollution via uneval Output

CVE-2026-123567

Sveltejs devalue before 5.6.4 Prototype Injection via parse and unflatten

CVE-2026-123565

Devalue before 5.9.3 Quadratic Expansion Denial of Service via uneval

CVE-2026-123564

Sveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse Arrays

CVE-2026-123563

Devalue before 5.9.3 Typed-Array Allocation Validation Bypass via parse

CVE-2026-123561

Sveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key Coercion

SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization