CVE-2026-123567 | sveltejs devalue up to 5.6.3 devalue.parse prototype pollution

November 8, 2026 Yanac

A vulnerability was found in sveltejs devalue up to 5.6.3. It has been rated as critical. This issue affects the function devalue.parse. This manipulation causes improperly controlled modification of object prototype attributes.

This vulnerability appears as CVE-2026-123567. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More