sveltekit-superforms vulnerabilities

1 known vulnerability in sveltekit-superforms from Ciscoheat. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  sveltekit-superforms: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2025-62381Oct 15, 2025Ciscoheat

  sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to a prototype pollution vulnerability within the parseFormData function of formData.js. An attacker can inject string and array properties int