| CVE-2026-114062 |
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach…
|
6.9
Medium
|
Oct 21, 2026 |
| CVE-2026-114063 |
SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-114061 |
SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a…
|
2.3
Low
|
Oct 21, 2026 |
| CVE-2026-114060 |
SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on…
|
2.1
Low
|
Oct 21, 2026 |
| CVE-2026-82261 |
SvelteKit (@sveltejs/kit) versions >=2.49.0…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82260 |
SvelteKit (@sveltejs/kit) versions >=2.49.0…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82259 |
SvelteKit versions from 2.49.0 through 2.53.2 (fixed in 2.53.3) contain a deserialization expansion issue in the…
|
8.7
High
|
Aug 28, 2026 |
| CVE-2026-82258 |
SvelteKit versions from 2.38.0 before 2.60.1 contain a race condition in query.batch that allows concurrent requests…
|
5.9
Medium
|
Aug 28, 2026 |
| CVE-2026-82257 |
SvelteKit versions before 2.69.1 contain a prototype pollution vulnerability in remote form functions with file input…
|
5.3
Medium
|
Aug 28, 2026 |
| CVE-2026-82256 |
SvelteKit before 2.69.1 fails to properly validate remote form function payload sizes, allowing attackers to crash the…
|
6.9
Medium
|
Aug 28, 2026 |
| CVE-2026-66062 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
5.3
Medium
|
Aug 7, 2026 |
| CVE-2026-40074 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
6.3
Medium
|
Apr 10, 2026 |
| CVE-2026-40073 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
8.2
High
|
Apr 10, 2026 |
| CVE-2026-27118 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
5.3
Medium
|
Feb 20, 2026 |
| CVE-2026-22803 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
8.2
High
|
Jan 15, 2026 |
| CVE-2025-67647 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
8.4
High
|
Jan 15, 2026 |
| CVE-2025-32388 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
5.4
Medium
|
Apr 15, 2025 |
| CVE-2024-53261 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
2.0
Low
|
Nov 25, 2024 |
| CVE-2024-53262 |
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte
|
2.0
Low
|
Nov 25, 2024 |
| CVE-2024-23641 |
SvelteKit is a web development kit
|
7.5
High
|
Jan 24, 2024 |
| CVE-2023-29008 |
The SvelteKit framework offers developers an option to create simple REST APIs
|
8.8
High
|
Apr 6, 2023 |
| CVE-2023-29003 |
SvelteKit is a web development framework
|
8.8
High
|
Apr 4, 2023 |