devalue vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-42570Highdevalue: Svelte devalue: DoS via sparse array deserialization GHSA-MWV9-GP5H-FRR4Lowdevalue: Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own…CVE-2026-30226Mediumdevalue: devalue has prototype pollution in devalue.parse and devalue.unflatten GHSA-33HQ-FVWR-56PMLowdevalue: devalue affected by CPU and memory amplification from sparse arrays GHSA-8QM3-746X-R74RLowdevalue: devalue `uneval`ed code can create objects with polluted prototypes when `eval`ed CVE-2026-22775Highdevalue: devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse CVE-2026-22774Highdevalue: Devalue is vulnerable to denial of service due to memory exhaustion in devalue.parse CVE-2025-57820Highdevalue: devalue prototype pollution vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo