{"vulnerability": "cve-2026-92708", "sightings": [{"uuid": "aefcb8de-8418-41eb-853e-d3b673db5a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92708", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2xjofgx2b", "content": "\ud83d\udfe0 CVE-2026-92708 - High (7.5)\n\nSvelte devalue is a JavaScript library that serializes values into strings when JSON.stringify is...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-92708/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:03:22.978208Z"}, {"uuid": "eeb4411c-4280-4673-aac4-07b8d642a6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92708", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117318594830374371", "content": "CVE-2026-92708 Svelte devalue 5.1.0-5.9.2 leaks up to 64KB of process memory via Buffer serialization, exposing bytes from other requests on SSR servers. CVSS 7.5. No patch yet - audit your devalue usage now. https://www.valtersit.com/cve/CVE-2026-92708/ #CVE #infosec #Svelte", "creation_timestamp": "2026-09-23T05:01:33.016699Z"}, {"uuid": "9acfacf0-1fa2-4a74-84e7-a2ba67d478bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92708", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw5xkbx5hk2j", "content": "CVE-2026-92708 Svelte devalue 5.1.0-5.9.2 leaks up to 64KB of process memory via Buffer serialization, exposing bytes from other requests on SSR servers. CVSS 7.5. No patch yet - audit your devalue usage now. https://www.valtersit.com/cve/CVE-2026-92708/ #CVE #infosec #Svelte", "creation_timestamp": "2026-09-23T05:01:34.751349Z"}]}