Description
A potential XSS vulnerability exists in Svelte for versions prior to 4.2.19.
Recommendation
Update the svelte package to the latest compatible version. Followings are version details:
- Affected version(s): < 4.2.19
- Patched version(s): 4.2.19
References
Could your website be exposed too?
SmartScanner can check your website for Svelte has a potential mXSS vulnerability due to improper HTML escaping and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability - CVE-2024-43407
- CryptPad has a Sanitizer Bypass in Diffmarked.js that Allows Arbitrary HTML Injection and Potential XSS - CVE-2026-26028
- @octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Back - CVE-2025-25288
- @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtrack - CVE-2025-25289
You might also like:
See something that needs correcting? Let us knowUpdated August 30, 2024