Vulnerabilities in sveltejs
48 resultsCVE-2026-82258MEDIUMSvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batchEPSS 0.2%CVE-2026-27122MEDIUMSvelte SSR does not validate dynamic element tag names in `<svelte:element>`EPSS 0.2%CVE-2026-27121MEDIUMSvelte affected by cross-site scripting via spread attributes in Svelte SSREPSS 0.2%CVE-2026-114061LOWSvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered PagesEPSS 0.2%CVE-2026-27119MEDIUMSvelte affected by XSS in SSR `<option>` elementEPSS 0.2%CVE-2026-42599MEDIUMCross-site scripting via spread attributes in Svelte SSREPSS 0.2%CVE-2026-114060LOWSvelteKit before 3.0.0 Open Redirect via Enhanced Form ActionsEPSS 0.2%CVE-2026-123568LOWSveltejs devalue before 5.6.3 Prototype Pollution via uneval OutputEPSS 0.2%