What is CVE-2026-82256?

CVE-2026-82256 is a medium-severity vulnerability in Sveltejs Kit, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2026-08-28.

How severe is CVE-2026-82256?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Sveltejs Kit

CVE-2026-82256

SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the Node process by sending large payloads. Repeated exploitation causes denial of service by repeatedly crashing the application process.

Vulnerability class: DoS (Denial of Service)

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sveltejs Kit

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-82256?: CVE-2026-82256 is a medium-severity vulnerability in Sveltejs Kit, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2026-08-28.
How severe is CVE-2026-82256?: Medium severity. CVSS v3 base score is 5.3 out of 10.