npm/@sveltejs/adapter-node CVE-2025-67647: high, EPSS 0.52%
SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering
Action: Upgrade @sveltejs/adapter-node to 5.5.1 or later.
npm i @sveltejs/adapter-node@5.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.4.1 | 5.5.1 | - |
Fixed versions
| 5.5.1 |
Sources
- osv: GHSA-j62c-4x62-9r35#npm/@sveltejs/adapter-node
- https://github.com/sveltejs/kit/security/advisories/GHSA-j62c-4x62-9r35
- https://nvd.nist.gov/vuln/detail/CVE-2025-67647
- https://github.com/sveltejs/kit/commit/d9ae9b00b14f5574d109f3fd548f960594346226
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fadapter-node%405.5.1
- https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%402.49.5
CVE-2025-67647 · published · modified · JSON