CVE-2026-123568 | SvelteJS devalue up to 5.6.2 uneval prototype pollution

A vulnerability labeled as problematic has been found in SvelteJS devalue up to 5.6.2. The impacted element is the function uneval. Executing a manipulation can lead to improperly controlled modification of object prototype attributes.

This vulnerability is handled as CVE-2026-123568. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More