Threats tagged 'ghsa-9rgm-9g3h-6x36'

CVE-2026-81176 is a denial of service vulnerability in the sveltejs devalue JavaScript library prior to version 5.9.2. The issue arises because devalue.parse does not reject out-of-bounds indices, leading to excessive computational work when parsing specially crafted untrusted payloads. This can cause applications using vulnerable versions to experience performance degradation or denial of service. The vulnerability is fixed in version 5.9.2.