Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODY_SIZE_LIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers of the application stack, so limits enforced in the WAF, gateway, or at the platform level are unaffected. This vulnerability is fixed in 2.57.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-10 | 1 | Patch1 |
| 2026-04-28 | 1 | General1 |
Pior que um Duplicado High, é um duplicado High de uma CVE https://nvd.nist.gov/vuln/detail/CVE-2026-40073 https://t.co/J5jim7Q20j
Post summary
The tweet simply references a duplicate high-severity CVE on NVD without providing technical details, proof of concept, or exploit information.
CVE-2026-40073 SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass … https://www.cve.org/CVERecord?id=CVE-2026-40073
Post summary
The tweet merely highlights a SvelteKit vulnerability that was fixed in version 2.57.1 and contains no proof of concept or evidence of exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | svelte | kit | - | node.js | - |