{"uuid": "eeb4411c-4280-4673-aac4-07b8d642a6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92708", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318594830374371", "content": "CVE-2026-92708 Svelte devalue 5.1.0-5.9.2 leaks up to 64KB of process memory via Buffer serialization, exposing bytes from other requests on SSR servers. CVSS 7.5. No patch yet - audit your devalue usage now. https://www.valtersit.com/cve/CVE-2026-92708/ #CVE #infosec #Svelte", "creation_timestamp": "2026-09-23T05:01:33.016699Z"}