npm/svelte CVE-2026-42567: medium, EPSS 0.45%

Svelte: ReDoS in `<svelte:element>` Tag Validation

Action: Upgrade svelte to 5.55.7 or later.

npm i svelte@5.55.7

Affected

Fixed versions

Sources

• osv: GHSA-9rmh-mm8f-r9h6
• https://github.com/sveltejs/svelte/security/advisories/GHSA-9rmh-mm8f-r9h6
• https://nvd.nist.gov/vuln/detail/CVE-2026-42567
• https://github.com/sveltejs/svelte
• https://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7

CVE-2026-42567 · published 2026-05-14T20:29:05Z · modified 2026-06-09T18:45:23.337407449Z · JSON