CVE-2025-32388
1 advisory.
npm/@sveltejs/kit CVE-2025-32388: medium 5.4
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
Action: Upgrade @sveltejs/kit to 2.20.6 or later.
npm i @sveltejs/kit@2.20.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.20.6 | - |
Fixed versions
| 2.20.6 |
Sources
- osv: GHSA-6q87-84jw-cjhp
- https://github.com/sveltejs/kit/security/advisories/GHSA-6q87-84jw-cjhp
- https://nvd.nist.gov/vuln/detail/CVE-2025-32388
- https://github.com/sveltejs/kit/commit/d3300c6a67908590266c363dba7b0835d9a194cf
- https://github.com/sveltejs/kit
- https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%402.20.6
CVE-2025-32388 · published · modified · JSON