GHSA-rqw3-x7hx-mm3pMediumCVSS 5.9
SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`
🔗 CVE IDs covered (1)
📋 Description
In affected versions, @sveltejs/adapter-node can attempt to add a header to an immutable request in a context that causes the server to crash, denying service to any other requests routed to that server.
🎯 Affected products2
- npm/@sveltejs/adapter-node:>= 5.5.7, < 5.5.8
- npm/@sveltejs/adapter-node:>= 6.0.0-next.0, < 6.0.1
🔗 References (7)
- https://github.com/sveltejs/kit/security/advisories/GHSA-rqw3-x7hx-mm3p
- https://github.com/sveltejs/kit/pull/17620
- https://github.com/sveltejs/kit/commit/04756a1f7a4f73e34f1934895340a46de84fc164
- https://github.com/sveltejs/kit/commit/0a2e58cbccdd46cac20aa5af4e2edf17e0da11dd
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]
- https://github.com/advisories/GHSA-rqw3-x7hx-mm3p