[@sveltejs/kit] CPU exhaustion in SvelteKit remote form deserialization (experimental only)

**[@sveltejs/kit] CPU exhaustion in SvelteKit remote form deserialization (experimental only)**

Versions of @sveltejs/kit prior to 2.52.2 with remote functions enabled are vulnerable to CPU exhaustion. Malformed form data can cause the server to become unresponsive while processing a request, resulting in denial of service. Only applications using both experimental.remoteFunctions and form are vulnerable. References https://github.com/sveltejs/kit/security/advisories/GHSA-88qp-p4qg-rqm6 https://github.com/sveltejs/kit/commit/3e607b314aec9e5f278d32847945b8b6323e1cb8 https://github.com/sveltejs/kit/releases/tag/@sveltejs/kit@2.52.2 https://github.com/advisories/GHSA-88qp-p4qg-rqm6

---

**[devsupporter 해설]**

이 기사는 GitHub Security Advisories에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.