Skip to contentSvelte Sveltekit vulnerabilities
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.69.1 Prototype Pollution via File InputCVE-2026-82257Fix available5.3 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.69.1 Denial of Service via Remote FormCVE-2026-82256Fix available6.9 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batchCVE-2026-82258Fix available5.9 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit 2.49.0 before 2.53.3 Denial of Service via formCVE-2026-82259Fix available8.7 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.52.2 CPU Exhaustion via Remote Form DeserializationCVE-2026-82261Fix available8.7 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit before 2.52.2 Memory Exhaustion via Remote Form DeserializationCVE-2026-82260Fix available8.7 High
- svelte sveltekit, sveltejs kit +1 moreCross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKitCVE-2024-53261Fix available2.0 Low
- svelte sveltekit, sveltejs kit +1 moreUnescaped error message included on error page in SvelteKitCVE-2024-53262Fix available2.0 Low
- svelte sveltekit, sveltejs kit +1 moreSvelteKit framework has Insufficient CSRF protection for CORS requestsCVE-2023-29008Fix available8.8 High
- svelte sveltekit, sveltejs kit +1 moreSvelteKit has Insufficient Cross-Site Request Forgery ProtectionCVE-2023-29003Fix available8.8 High