Skip to content
OpenAdvisories

Vendor

Svelte

1 known vulnerabilities.

Products

Svelte 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-15265

    Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)

    An SSR XSS exists in async hydration when attacker‑controlled keys are passed to hydratable. The key is embedded inside a <script> block without HTML‑safe escaping, allowing </script> to terminate the script and inject arbitrary JavaScript. This enables remot…

    Svelte Svelte svelte npm