中
5.3
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. At...
CVE-2026-114062
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server, which redirects them to internal services.
出典: NIST National Vulnerability Database NVD