Threats tagged 'ghsa-97c7-3pc7-pw7r'

Sveltejs devalue versions from 1.0.0 up to but not including 5.9.3 contain a memory exhaustion vulnerability in the uneval function. The flaw arises because the generated code for sparse arrays allocates memory proportional to the declared length of the array when evaluated. An attacker who can control a very large sparse array serialized by an application could cause memory exhaustion in the browser or runtime environment processing the output.