sveltejs svelte

• CVE-2026-42599 Medium 5.1 Cross-site scripting via spread attributes in Svelte SSR 0.2%
• CVE-2026-42567 Medium 5.9 Svelte: ReDoS in `<svelte:element>` Tag Validation 0.5%
• CVE-2026-42573 High 8.1 Svelte: XSS via DOM Clobbering of Internal Framework State 0.3%
• CVE-2026-27902 Medium 5.3 Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers 0.3%
• CVE-2026-27901 Medium 5.3 Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` 0.3%
• CVE-2026-27125 Medium 5.3 Svelte SSR attribute spreading includes inherited properties from prototype chain 0.4%
• CVE-2026-27122 Medium 5.1 Svelte SSR does not validate dynamic element tag names in `<svelte:element>` 0.2%
• CVE-2026-27121 Medium 5.1 Svelte affected by cross-site scripting via spread attributes in Svelte SSR 0.2%
• CVE-2026-27119 Medium 5.1 Svelte affected by XSS in SSR `<option>` element 0.2%
• CVE-2024-45047 Medium 5.4 Potential mXSS vulnerability due to improper HTML escaping in svelte 0.4%