Vulnerabilities in sveltejs
26 resultsCVE-2026-27901MEDIUMSvelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`EPSS 0.2%CVE-2026-42573MEDIUMSvelte: XSS via DOM Clobbering of Internal Framework StateEPSS 0.2%CVE-2026-27122MEDIUMSvelte SSR does not validate dynamic element tag names in `<svelte:element>`EPSS 0.2%CVE-2026-27121MEDIUMSvelte affected by cross-site scripting via spread attributes in Svelte SSREPSS 0.2%CVE-2026-27119MEDIUMSvelte affected by XSS in SSR `<option>` elementEPSS 0.2%CVE-2026-42599MEDIUMCross-site scripting via spread attributes in Svelte SSREPSS 0.2%