Sveltejs Svelte vulnerabilities

• svelte, red hat build of podman desktop +1 more Svelte: XSS via DOM Clobbering of Internal Framework State CVE-2026-42573 Fix available 5.3 MediumMay 14, 2026
• svelte Svelte: ReDoS in `<svelte:element>` Tag Validation CVE-2026-42567 Fix available 5.9 MediumMay 14, 2026
• svelte Cross-site scripting via spread attributes in Svelte SSR CVE-2026-42599 Fix available 5.1 MediumMay 14, 2026
• svelte Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers CVE-2026-27902 Fix available 5.3 MediumFebruary 26, 2026
• svelte Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` CVE-2026-27901 Fix available 5.3 MediumFebruary 26, 2026
• svelte Svelte SSR attribute spreading includes inherited properties from prototype chain CVE-2026-27125 Fix available 5.3 MediumFebruary 19, 2026
• svelte Svelte SSR does not validate dynamic element tag names in `<svelte:element>` CVE-2026-27122 Fix available 5.1 MediumFebruary 19, 2026
• svelte Svelte affected by cross-site scripting via spread attributes in Svelte SSR CVE-2026-27121 Fix available 5.1 MediumFebruary 19, 2026
• svelte Svelte affected by XSS in SSR `<option>` element CVE-2026-27119 Fix available 5.1 MediumFebruary 19, 2026
• svelte Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR) CVE-2025-15265 Fix available 5.3 MediumJanuary 15, 2026
• svelte Potential mXSS vulnerability due to improper HTML escaping in svelte CVE-2024-45047 Fix available 5.4 MediumAugust 30, 2024
• svelte Cross-site Scripting (XSS) CVE-2022-25875 Fix available 5.4 MediumJuly 12, 2022