Vulnerabilities

TI-2026-28905 CVE-2026-40074 · GHSA-3f6h-2hrp-w5wx

SvelteKit's invalidated redirect in handle hook causes Denial-of-Service

LOW 34

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00372 Published 2026-04-10 Fixed in 2.57.1 CWE-755

TI-2026-28904 CVE-2026-40073 · GHSA-2crg-3p73-43xp

LOW 36

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00545 Published 2026-04-10 Fixed in 2.57.1 CWE-770

TI-2026-18320 CVE-2026-22803 · GHSA-j2f3-wq62-6q46

MEDIUM 42

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00585 Published 2026-01-15 Fixed in 2.49.5 CWE-789

TI-2025-41390 CVE-2025-67647 · GHSA-j62c-4x62-9r35

MEDIUM 43

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00608 Published 2026-01-15 Fixed in 2.49.5, 5.5.1 CWE-248

TI-2024-15660 CVE-2024-23641 · GHSA-g5m6-hxpp-fc49

HIGH 72

SvelteKit is a web development kit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00764 Published 2024-01-24 Fixed in 2.4.3, 2.1.2 +2 CWE-20