Skip to content
5.3 Medium

CVE-2026-42573 Svelte is a performance oriented web framework

Description

Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This issue has been patched in version 5.55.7.

Affected products and versions

Product Affected versions Fixed in
svelte 5.55 earliest → < 5.55.7 5.55.7
Red Hat Build of Podman Desktop Versions not published

References

Timeline

  1. Published
  2. Last modified
The 10 CVEs of svelte →
Track this CVE