sveltejs

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

sveltejs records in CISA KEV

No sveltejs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Kit · all components

TI-2024-15660 CVE-2024-23641 · GHSA-g5m6-hxpp-fc49

HIGH 72

SvelteKit is a web development kit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00764 Published 2024-01-24 Fixed in 2.4.3, 2.1.2 +2 CWE-20

TI-2025-41390 CVE-2025-67647 · GHSA-j62c-4x62-9r35

MEDIUM 43

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00517 Published 2026-01-15 Fixed in 2.49.5, 5.5.1 CWE-248

TI-2026-18320 CVE-2026-22803 · GHSA-j2f3-wq62-6q46

MEDIUM 42

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00585 Published 2026-01-15 Fixed in 2.49.5 CWE-789

TI-2026-28904 CVE-2026-40073 · GHSA-2crg-3p73-43xp

LOW 36

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00545 Published 2026-04-10 Fixed in 2.57.1 CWE-770

TI-2026-28905 CVE-2026-40074 · GHSA-3f6h-2hrp-w5wx

LOW 34

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00372 Published 2026-04-10 Fixed in 2.57.1 CWE-755