Catégories
CVE-2024-23641

Sending a GET or HEAD request with a body crashes SvelteKit

Résumé

Sending a GET or HEAD request with a body crashes SvelteKit

Description d'origine

La description telle que publiée par la source (souvent en anglais).

SvelteKit is a web development kit. In SvelteKit 2, sending a GET request with a body eg {} to a built and previewed/hosted sveltekit app throws Request with GET/HEAD method cannot have body. and crashes the preview/hosting. After this happens, one must manually restart the app. TRACE requests will also cause the app to crash. Prerendered pages and SvelteKit 1 apps are not affected. @sveltejs/adapter-node versions 2.1.2, 3.0.3, and 4.0.1 and @sveltejs/kit version 2.4.3 contain a patch for this issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Références

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus