SV
Product
svelte
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add svelte to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42567 | 7.5 | Jun 9 | Svelte: ReDoS in `<svelte:element>` Tag Validation Affected: >= 5.51.5, < 5.55.7 |
| CVE-2026-27125 | 6.8 | Feb 20 | Svelte SSR attribute spreading includes inherited properties from prototype chain Affected: < 5.51.5 |
| CVE-2026-42599 | 6.1 | Jun 9 | Cross-site scripting via spread attributes in Svelte SSR Affected: < 5.55.7 |
| CVE-2026-42573 | 6.1 | Jun 9 | Svelte: XSS via DOM Clobbering of Internal Framework State Affected: < 5.55.7 |
| CVE-2026-27901 | 6.1 | Feb 26 | Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` Affected: < 5.53.5 |
| CVE-2026-27902 | 5.4 | Feb 26 | Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers Affected: >= 5.53.0, < 5.53.5 |
| CVE-2026-27122 | 5.4 | Feb 20 | Svelte SSR does not validate dynamic element tag names in `<svelte:element>` Affected: < 5.51.5 |
| CVE-2026-27121 | 5.4 | Feb 20 | Svelte affected by cross-site scripting via spread attributes in Svelte SSR Affected: < 5.51.5 |
| CVE-2026-27119 | 5.4 | Feb 20 | Svelte affected by XSS in SSR `<option>` element Affected: >= 5.39.3, < 5.51.5 |
Showing 9