Vulnerabilidades en sveltejs
48 resultadosCVE-2026-123563HIGHDevalue before 5.9.3 Typed-Array Allocation Validation Bypass via parseEPSS 0.4%CVE-2023-29008HIGHSvelteKit framework has Insufficient CSRF protection for CORS requestsEPSS 0.4%CVE-2026-40074MEDIUMSvelteKit's invalidated redirect in handle hook causes Denial-of-ServiceEPSS 0.4%CVE-2025-57820HIGHSvelte devalue vulnerable to prototype pollutionEPSS 0.4%CVE-2024-45047MEDIUMPotential mXSS vulnerability due to improper HTML escaping in svelteEPSS 0.4%CVE-2026-82257MEDIUMSvelteKit before 2.69.1 Prototype Pollution via File InputEPSS 0.4%CVE-2026-114062MEDIUMSvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch FallbacksEPSS 0.4%CVE-2024-53261LOWCross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKitEPSS 0.4%CVE-2026-123565HIGHDevalue before 5.9.3 Quadratic Expansion Denial of Service via unevalEPSS 0.3%CVE-2026-123564HIGHSveltejs devalue before 5.9.3 Memory Exhaustion via uneval Sparse ArraysEPSS 0.3%CVE-2026-123566HIGHDevalue before 5.9.3 CPU Amplification Denial of Service via unevalEPSS 0.3%CVE-2026-123569HIGHDevalue before 5.6.3 Denial of Service via Sparse Array SerializationEPSS 0.3%CVE-2026-123562HIGHDevalue 5.8.0 before 5.9.3 Denial of Service via stringifyAsync Unhandled RejectionEPSS 0.3%CVE-2026-42573MEDIUMSvelte: XSS via DOM Clobbering of Internal Framework StateEPSS 0.3%CVE-2025-32388MEDIUMSvelteKit allows XSS via tracked search_paramsEPSS 0.3%CVE-2026-27118MEDIUMCache poisoning in @sveltejs/adapter-vercelEPSS 0.3%CVE-2026-27902MEDIUMSvelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration MarkersEPSS 0.3%CVE-2026-27901MEDIUMSvelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`EPSS 0.3%CVE-2026-123561MEDIUMSveltejs devalue before 5.9.3 __proto__ Rejection Bypass via Property-Key CoercionEPSS 0.2%CVE-2026-123567MEDIUMSveltejs devalue before 5.6.4 Prototype Injection via parse and unflattenEPSS 0.2%