CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123568
MEDIUMCVSS 4.4NVD feed
Published 8 November 2026 · tracked since 8 November 2026
Description
Sveltejs devalue before 5.6.3 contains a prototype pollution vulnerability that allows attackers to alter object prototypes by supplying untrusted data to uneval. When the generated code is later evaluated, it creates objects with polluted prototypes, producing output data whose shape differs from t
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113364
- CVE-2026-113363
- CVE-2026-113362
- CVE-2026-124502 MEDIUM 4.3
- CVE-2026-124500 MEDIUM 6.3
- CVE-2026-124499 MEDIUM 4.7
- CVE-2026-18893 HIGH 7.1
- CVE-2026-18546 MEDIUM 5.4
- CVE-2026-120113 MEDIUM 6.4
- CVE-2026-116500 MEDIUM 6.2