Svelte devalue Prototype Pollution Vulnerability in devalue.parse and devalue.unflatten

A prototype pollution vulnerability has been identified in the Svelte devalue library, specifically in versions through 5.6.3. The issue arises in the devalue.parse and devalue.unflatten functions, which are vulnerable to maliciously crafted payloads. Exploitation of this vulnerability could lead to a Denial of Service (DoS) condition or type confusion.

Impact

Exploitation of this vulnerability could cause a Denial of Service (DoS) condition or type confusion.

Remediation

Users can upgrade to devalue version 5.6.4 to address this vulnerability.