svelte vulnerabilities (npm)
14 vulnerabilities.
-
sveltenpm Svelte: SSR XSS via Insecure Promise Serialization in hydratable 5.3 Medium -
sveltenpm Svelte: XSS via DOM Clobbering of Internal Framework State 5.3 Medium -
sveltenpm Svelte: ReDoS in `<svelte:element>` Tag Validation 5.9 Medium -
sveltenpm Cross-site scripting via spread attributes in Svelte SSR 5.1 Medium -
sveltenpm Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers 5.3 Medium -
sveltenpm Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` 5.3 Medium -
sveltenpm Svelte SSR attribute spreading includes inherited properties from prototype chain 5.3 Medium -
sveltenpm Svelte SSR does not validate dynamic element tag names in `<svelte:element>` 5.1 Medium -
sveltenpm Svelte affected by cross-site scripting via spread attributes in Svelte SSR 5.1 Medium -
sveltenpm Svelte affected by XSS in SSR `<option>` element 5.1 Medium -
sveltenpm svelte is vulnerable to XSS with textarea bind:value 8.4 High -
sveltenpm Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR) 5.3 Medium -
sveltenpm Potential mXSS vulnerability due to improper HTML escaping in svelte 5.4 Medium -
sveltenpm Cross-site Scripting (XSS) 5.4 Medium