https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 03:51:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-22775 <p><strong>Affected:</strong> sveltejs devalue, Red Hat Trusted Artifact Signer 1.2, Red Hat Trusted Artifact Signer 1.3, Red Hat Build of Podman Desktop - Tech Preview</p> <p>Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn&#39;t sufficient for the job. From 5.1.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the ArrayBuffer hydration expecting base64 encoded strings as input, but not checking the assumption before decoding the input. This vulnerability is fixed in 5.6.2.</p> <p><strong>Affected:</strong> sveltejs devalue, Red Hat Trusted Artifact Signer 1.2, Red Hat Trusted Artifact Signer 1.3, Red Hat Build of Podman Desktop - Tech Preview</p> <p>Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn&#39;t sufficient for the job. From 5.1.0 to 5.6.1, certain inputs can cause devalue.parse to consume excessive CPU time and/or memory, potentially leading to denial of service in systems that parse input from untrusted sources. This affects applications using devalue.parse on externally-supplied data. The root cause is the ArrayBuffer hydration expecting base64 encoded strings as input, but not checking the assumption before decoding the input. This vulnerability is fixed in 5.6.2.</p> https://vulnerability.circl.lu/vuln/cve-2026-22775