[@sveltejs/kit] Memory exhaustion in SvelteKit remote form deserialization (experimental only)

**[@sveltejs/kit] Memory exhaustion in SvelteKit remote form deserialization (experimental only)**

Versions of @sveltejs/kit prior to 2.52.2 with remote functions enabled can be vulnerable to memory exhaustion. Malformed form data can cause the server process to crash due to excessive memory allocation, resulting in denial of service. Only applications using both experimental.remoteFunctions and form are vulnerable. References https://github.com/sveltejs/kit/security/advisories/GHSA-vrhm-gvg7-fpcf https://github.com/sveltejs/kit/commit/f47c01bd8100328c24fdb8522fe35913b0735f35 https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.52.2 https://github.com/advisories/GHSA-vrhm-gvg7-fpcf

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.