CVE-2026-82257Published
SvelteKit before 2.69.1 Prototype Pollution via File Input
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-82257 · Microsoft / collected KEV context
cve-program · CVE-2026-82257
- https://github.com/sveltejs/kit/security/advisories/GHSA-866w-xmhq-wj7x
- https://www.vulncheck.com/advisories/sveltekit-before-2.69.1-prototype-pollution-via-file-input
euvd · EUVD-2026-67583
- https://github.com/sveltejs/kit/security/advisories/GHSA-866w-xmhq-wj7x
- https://www.vulncheck.com/advisories/sveltekit-before-2.69.1-prototype-pollution-via-file-input
nvd · CVE-2026-82257
- https://github.com/sveltejs/kit/security/advisories/GHSA-866w-xmhq-wj7x
- https://www.vulncheck.com/advisories/sveltekit-before-2.69.1-prototype-pollution-via-file-input
osv · GHSA-866w-xmhq-wj7x
- https://github.com/sveltejs/kit/security/advisories/GHSA-866w-xmhq-wj7x
- https://github.com/sveltejs/kit/pull/16218
- https://github.com/sveltejs/kit/commit/df32f6fe86cdd0b68b650e3e4631e5896453dcd3
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]
- https://github.com/sveltejs/kit/releases/tag/@sveltejs/[email protected]
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.