CVE-2026-123561 | sveltejs devalue up to 5.9.2 parse prototype pollution

November 8, 2026 Yanac

A vulnerability was found in sveltejs devalue up to 5.9.2. It has been classified as critical. This affects the function parse. The manipulation leads to improperly controlled modification of object prototype attributes.

This vulnerability is documented as CVE-2026-123561. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More