sveltejs

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

sveltejs records in CISA KEV

No sveltejs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Devalue · all components

TI-2026-18293 CVE-2026-22775 · GHSA-g2pg-6438-jwpf

MEDIUM 40

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00625 Published 2026-01-15 Partial fix · 5.6.2 CWE-405

TI-2026-18292 CVE-2026-22774 · GHSA-vw5p-8cq8-m7mv

MEDIUM 40

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00625 Published 2026-01-15 Partial fix · 5.6.2 CWE-405

TI-2026-30850 CVE-2026-42570 · GHSA-77vg-94rm-hx3p

LOW 39

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2026-06-09 Partial fix · 5.8.1 CWE-770

TI-2026-23459 CVE-2026-30226 · GHSA-cfw5-2vxh-hr84

LOW 28

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the job.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00471 Published 2026-03-11 Fixed in 5.6.4 CWE-1321