@sveltejs/kit

@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass

@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service

Memory exhaustion in SvelteKit remote form deserialization (experimental only)

SvelteKit framework has Insufficient CSRF protection for CORS requests

SvelteKit has deserialization expansion in unvalidated `form` remote function leading to Denial of Service (experimental only)

CPU exhaustion in SvelteKit remote form deserialization (experimental only)

SvelteKit vulnerable to Cross-Site Request Forgery

SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering

@sveltejs/kit has memory amplification DoS vulnerability in Remote Functions binary form deserializer (application/x-sveltekit-formdata)