{
  "cveId": "CVE-2026-42570",
  "url": "https://patchblox.com/security/cve/CVE-2026-42570",
  "summary": "CVE-2026-42570 is fixed in rh-podman-desktop on 1 platform by RHSA-2026:57590 (version 1.1.2-1.el10_2), released August 21, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "rh-podman-desktop: Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn\u0027t sufficient for t...",
  "description": "Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn\u0027t sufficient for the job. From version 5.6.3 to before version 5.8.1, devalue.parse could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption. This issue has been patched in version 5.8.1.",
  "published": "2026-06-09T16:12:26Z",
  "severity": "important",
  "cvss": 7.5,
  "epss": 0.00397,
  "epssPercentile": 0.34159,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "rh-podman-desktop",
      "release": "RHEL 10",
      "fixedVersion": "1.1.2-1.el10_2",
      "fix": "RHSA-2026:57590",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57590",
      "released": "2026-08-21T23:39:10Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}