CVE-2025-15265
1 advisory.
npm/svelte CVE-2025-15265: medium 6.1, EPSS 0.35%
svelte vulnerable to Cross-site Scripting
Action: Upgrade svelte to 5.46.4 or later.
npm i svelte@5.46.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.46.0 | 5.46.4 | - |
Fixed versions
| 5.46.4 |
Sources
- osv: GHSA-6738-r8g5-qwp3
- nvd: CVE-2025-15265
- https://github.com/sveltejs/svelte/security/advisories/GHSA-6738-r8g5-qwp3
- https://github.com/sveltejs/svelte/commit/ef81048e238844b729942441541d6dcfe6c8ccca
- https://fluidattacks.com/advisories/lydian
- https://github.com/sveltejs/svelte
- https://github.com/sveltejs/svelte/releases/tag/svelte%405.46.4
CVE-2025-15265 · published · modified · JSON