CVE-2026-42599
1 advisory.
npm/svelte CVE-2026-42599: medium
Svelte SSR vulnerable to cross-site scripting via spread attributes
Action: Upgrade svelte to 5.55.7 or later.
npm i svelte@5.55.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.55.7 | - |
Fixed versions
| 5.55.7 |
Sources
- osv: GHSA-pr6f-5x2q-rwfp
- https://github.com/sveltejs/svelte/security/advisories/GHSA-pr6f-5x2q-rwfp
- https://nvd.nist.gov/vuln/detail/CVE-2026-27121
- https://nvd.nist.gov/vuln/detail/CVE-2026-42599
- https://github.com/sveltejs/svelte
- https://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
CVE-2026-42599 · published · modified · JSON