npm/svelte: medium
Svelte: SSR XSS via Insecure Promise Serialization in hydratable
Action: Upgrade svelte to 5.55.7 or later.
npm i svelte@5.55.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.46.0 | 5.55.7 | - |
Fixed versions
| 5.55.7 |
Sources
- osv: GHSA-f3cj-j4f6-wq85
- https://github.com/sveltejs/svelte/security/advisories/GHSA-f3cj-j4f6-wq85
- https://github.com/sveltejs/svelte/commit/a16ebc67bbcf8f708360195687e1b2719463e1a4
- https://github.com/sveltejs/svelte
- http://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
published · modified · JSON