sveltejs devalue

• CVE-2026-92708 High 7.5 devalue: Cross-request process memory disclosure in devalue when `stringify` / `uneval` serialize Node Buffers 0.7%
• CVE-2026-81176 Medium 5.3 Svelte devalue: DoS via malformed input 0.5%
• CVE-2026-42570 High 7.5 Svelte devalue: DoS via sparse array deserialization 0.4%
• CVE-2026-30226 Medium 6.3 devalue has prototype pollution in devalue.parse and devalue.unflatten 0.5%
• CVE-2026-22775 High 7.5 devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse 0.6%
• CVE-2026-22774 High 7.5 devalue vulnerable to denial of service due to memory exhaustion in devalue.parse 0.6%
• CVE-2025-57820 High 7.9 Svelte devalue vulnerable to prototype pollution 0.4%