Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

svelte

npm

Cybernetically enhanced web apps

View on github.com · View on npmjs.org

Security Advisories for svelte in npm

Moderate
5 months ago

Svelte: SSR XSS via Insecure Promise Serialization in hydratable GSA_kwCzR0hTQS1mM2NqLWo0ZjYtd3E4Nc4ABW5X

npm svelte
Moderate
5 months ago

Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State GSA_kwCzR0hTQS1yY3F4LTZxOGMtMmM0Ms4ABW5Q

npm svelte
Moderate
5 months ago

Svelte: ReDoS in `<svelte:element>` Tag Validation GSA_kwCzR0hTQS05cm1oLW1tOGYtcjloNs4ABW5P

npm svelte
Moderate
5 months ago

Svelte SSR vulnerable to cross-site scripting via spread attributes GSA_kwCzR0hTQS1wcjZmLTV4MnEtcndmcM4ABW4x

npm svelte
Moderate
8 months ago

Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers GSA_kwCzR0hTQS1xZ3ZnLXByOHYtNnJyM84ABS3x

npm svelte
Moderate
8 months ago

Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` GSA_kwCzR0hTQS1waHd2LWM1NjItZ3ZtaM4ABS3w

npm svelte
Moderate
8 months ago

Svelte SSR attribute spreading includes inherited properties from prototype chain GSA_kwCzR0hTQS1jcnBmLTRocngtM2pycM4ABSmi

npm svelte
Moderate
8 months ago

Svelte SSR does not validate dynamic element tag names in `<svelte:element>` GSA_kwCzR0hTQS1tNTZxLXZ3NGMtYzJjcM4ABShr

npm svelte
Moderate
8 months ago

Svelte affected by cross-site scripting via spread attributes in Svelte SSR GSA_kwCzR0hTQS1mN2dyLTZwODktcjg4M84ABShq

npm svelte
Moderate
8 months ago

Svelte affected by XSS in SSR `<option>` element GSA_kwCzR0hTQS1oN2g3LW1tNjgtZ21yY84ABShp

npm svelte
High
9 months ago

svelte is vulnerable to XSS with textarea bind:value GSA_kwCzR0hTQS1ndzMyLTlybXctcXd3d84ABRMp

npm svelte
Moderate
9 months ago

svelte vulnerable to Cross-site Scripting GSA_kwCzR0hTQS02NzM4LXI4ZzUtcXdwM84ABRIv

npm svelte
Moderate
about 2 years ago

Svelte has a potential mXSS vulnerability due to improper HTML escaping GSA_kwCzR0hTQS04MjY2LTg0d3Atd3Y1Y84AA_Dj

npm svelte
Moderate
over 4 years ago

Svelte vulnerable to XSS when using objects during server-side rendering GSA_kwCzR0hTQS13djhxLXI5MzItOGhjN84AAtWH

npm svelte

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Moderate 13 High 1