Skip to content
OpenAdvisories

Package · npm

svelte

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-gw32-9rmw-qwww

    svelte is vulnerable to XSS with textarea bind:value

    ### Summary A server-side rendered `<textarea>` with two-way bound value does not have its value correctly escaped in the rendered HTML. ### Details In SSR, `<textarea bind:value={...}>` does not have its value escaped when it is rendered into the HTML as `<t…

    svelte npm