5.3
Medium
CVE-2026-42573 Svelte is a performance oriented web framework
Description
Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This issue has been patched in version 5.55.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| svelte 5.55 | earliest → < 5.55.7 | 5.55.7 |
| Red Hat Build of Podman Desktop | Versions not published |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified