@sveltia/cms vulnerabilities (npm)

2 vulnerabilities.

• @sveltia/cms npm Sveltia CMS: Stored XSS in Markdown/RichText preview via unsandboxed same-origin iframe GHSA-h5jc-78hr-3pc9 Fix available 1.1 LowJune 19, 2026
• @sveltia/cms npm Sveltia CMS: Stored XSS in entry summary rendering via entity-decoded HTML GHSA-97r8-rf7q-wmjw Fix available 2.3 LowMay 18, 2026