sveltejs Kit Vulnerabilities

Sveltejs Kit vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

28 August 2026

CPU Exhaustion Vulnerability in SvelteKit by SvelteJS
CVE-2026-82261
SveltejsKit8.7HIGH
Memory Exhaustion Vulnerability in SvelteKit by Svelte
CVE-2026-82260
SveltejsKit8.7HIGH
Denial of Service Vulnerability in SvelteKit by SvelteJS
CVE-2026-82259
SveltejsKit8.7HIGH
Race Condition in SvelteKit Affects User Data Security
CVE-2026-82258
SveltejsKit5.9MEDIUM
Prototype Pollution Vulnerability in SvelteKit by Svelte
CVE-2026-82257
SveltejsKit5.3MEDIUM
Denial of Service Vulnerability in SvelteKit by Svelte
CVE-2026-82256
SveltejsKit6.9MEDIUM

7 August 2026

Quadratic Backtracking Vulnerability in SvelteKit Framework by Svelte
CVE-2026-66062
SveltejsKit5.3MEDIUM

10 April 2026

20 February 2026

Cache Poisoning Vulnerability in SvelteKit by Vercel
CVE-2026-27118
SveltejsKit5.3MEDIUM

15 January 2026

15 April 2025

XSS Vulnerability in SvelteKit Framework Affects Web Application Development
CVE-2025-32388
SveltejsKit5.4MEDIUM

24 January 2024

Sending a GET or HEAD request with a body crashes SvelteKit
CVE-2024-23641
sveltejskit7.5HIGH

6 April 2023

SvelteKit framework has Insufficient CSRF protection for CORS requests
CVE-2023-29008
SveltejsKit8.8HIGH

4 April 2023

SvelteKit has Insufficient Cross-Site Request Forgery Protection
CVE-2023-29003
SveltejsKit8.8HIGH