Preliminary research

Avoiding the paradox: A native full-read SSRF and one-shot DoS in SvelteKit

Rachid Allam (zhero) and Yasser Allam (inzo_) · zhero web security · 16 January 2026

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Record

Researcher

Rachid Allam (zhero) and Yasser Allam (inzo_)

Published by

zhero web security

Date

16 January 2026

Topic

Server

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• SvelteKit security advisory Advisory

This page is the archive's own catalogue record. The research is the work of Rachid Allam (zhero) and Yasser Allam (inzo_), first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 September 2026.