CVE-2026-123563 | sveltejs Devalue up to 5.9.2 parse memory allocation

November 8, 2026 Yanac

A vulnerability was found in sveltejs Devalue up to 5.9.2. It has been declared as problematic. This vulnerability affects the function parse. The manipulation results in uncontrolled memory allocation.

This vulnerability is reported as CVE-2026-123563. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More