Skip to content
OpenAdvisories

Product · sveltejs

kit

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2024-53261

    Cross-Site Scripting attack (XSS) on dev mode 404 page in SvelteKit

    SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripti…

    sveltejs kit @sveltejs/kit npm
  • Low 2.0
    CVE-2024-53262

    Unescaped error message included on error page in SvelteKit

    SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. The static error.html template for errors contains placeholders that are replaced without escaping the content first. error.html is the page that is rendered whe…

    sveltejs kit @sveltejs/kit npm