npm/svelte CVE-2026-27121: medium 5.4, EPSS 0.22%
Svelte affected by cross-site scripting via spread attributes in Svelte SSR
Action: Upgrade svelte to 5.51.5 or later.
npm i svelte@5.51.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.51.5 | - |
Fixed versions
| 5.51.5 |
Sources
- osv: GHSA-f7gr-6p89-r883
- nvd: CVE-2026-27121
- https://github.com/sveltejs/svelte/security/advisories/GHSA-f7gr-6p89-r883
- https://github.com/sveltejs/svelte
CVE-2026-27121 · published · modified · JSON