npm/@sveltejs/kit CVE-2023-29003: high 8.8, EPSS 0.56%
SvelteKit vulnerable to Cross-Site Request Forgery
Action: Upgrade @sveltejs/kit to 1.15.1 or later.
npm i @sveltejs/kit@1.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.15.1 | - |
Fixed versions
| 1.15.1 |
Sources
- osv: GHSA-5p75-vc5g-8rv2
- https://github.com/sveltejs/kit/security/advisories/GHSA-5p75-vc5g-8rv2
- https://nvd.nist.gov/vuln/detail/CVE-2023-29003
- https://github.com/sveltejs/kit/commit/bb2253d51d00aba2e4353952d4fb0dcde6c77123
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%401.15.1
CVE-2023-29003 · published · modified · JSON