JEDI-SEC | Security Research & Digital Defense

GHSA-rqw3-x7hx-mm3p: SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`

Written by

jedisec_u136k7

in

  • Severity: MEDIUM
  • CVE: CVE-2026-128123
  • Ecosystems: npm, npm
  • Packages: @sveltejs/adapter-node, @sveltejs/adapter-node

In affected versions, `@sveltejs/adapter-node` can attempt to add a header to an immutable request in a context that causes the server to crash, denying service to any other requests routed to that server.

Source: GitHub Security Advisories · 2026-11-13

More posts