CVE-2026-27119
1 advisory.
npm/svelte CVE-2026-27119: medium, EPSS 0.24%
Svelte affected by XSS in SSR `<option>` element
Action: Upgrade svelte to 5.51.5 or later.
npm i svelte@5.51.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.39.3 | 5.51.5 | - |
Fixed versions
| 5.51.5 |
Sources
- osv: GHSA-h7h7-mm68-gmrc
- https://github.com/sveltejs/svelte/security/advisories/GHSA-h7h7-mm68-gmrc
- https://nvd.nist.gov/vuln/detail/CVE-2026-27119
- https://github.com/sveltejs/svelte
CVE-2026-27119 · published · modified · JSON