SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 10, 2026 · NIST NVD

   Detected

   SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODY_SIZE_LIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers of the application stack, so limits enforced in the WAF, gateway, or at the platform level are unaff

2. Jun 17, 2026 · NIST NVD

   Updated

   SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODY_SIZE_LIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size limits at other layers of the application stack, so limits enforced in the WAF, gateway, or at the platform level are unaff

Affected

• cpe svelte/kitversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-40073

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-40073

  SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Prior to 2.57.1, under certain circumstances, requests could bypass the BODY_SIZE_LIMIT on SvelteKit applications running with adapter-node. This bypass does not affect body size lim

  nvd.nist.gov

References

• Patch · github.com
• Product · github.com
• Vendor Advisory · github.com