Security Update: Multiple vulnerabilities in SvelteKit
UpdateUnverifiedAdded Sep 24, 2026
The Svelte team has disclosed five CVEs affecting the Svelte and SvelteKit ecosystem. Here's what Netlify customers need to know. Vulnerabilities CVE-2026-22775 : Memory/CPU exhaustion in devalue (5.1.0–5.6.1) CVE-2026-22774 : Memory exhaustion in devalue (5.3.0–5.6.1) CVE-2026-22803 : Server crash in @sveltejs/kit (2.49.0–2.49.4) CVE-2025-67647 : Server...
Topics: Security, Pricing, Developer tools
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| Jan 16 | Security Update: DoS vulnerability in Node.jsunverified Update | Update |
| Jan 14 | GPT-5.2-Codex Now Available in AI Gateway and Agent Runnersunverified Update | Update |
| Jan 19 | Security Update: Multiple vulnerabilities in React Router and Remixunverified Update | Update |
| Jan 8 | Play Games While Agent Runners Do the Workunverified Update | Update |
| Jan 8 | Prerender.io support available as new extensionunverified Update | Update |
| Jan 26 | Security Update: DoS vulnerability in Next.js and React Server Componentsunverified Preview | Preview |
| Jan 29 | Agent Runners improvementsunverified Update | Update |
| Feb 5 | Claude Opus 4.6 now available in AI Gateway and Agent Runnersunverified Update | Update |
Also shipped on Jan 15, 2026
Netlify in January 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Jan 15 |  Cloudflare | WAF - WAF Release - 2026-01-15unverified | Cloudflare developer platform | Beta |
| Jan 15 |  Grafana Labs | Grafana Assistant in Slack enters Public Previewunverified | Grafana Cloud | Preview |
| Jan 15 | Grafana Labs | Datagrid deprecationunverified | Grafana Cloud | Deprecation |
| Jan 15 |  Deepgram | Container Images (release 260115)unverified | Deepgram | Update |
| Jan 15 | Deepgram | January 2026 Self-Hosted Release: Update Recommendationunverified | Deepgram | Update |
| Jan 15 | Deepgram | This Release Contains The Following Changesunverified | Deepgram | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.