Svelte kayıtları
svelte üreticisine ait 32 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %96,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12
- CWE-400 Uncontrolled Resource Consumption3
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')2
- CWE-405 Asymmetric Resource Consumption (Amplification)2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWEBug bounty kapsamı
Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.
Tüm kayıtlar
32 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-29003İstismar yok | SvelteKit has Insufficient Cross-Site Request Forgery Protectionsvelte · sveltekit · CWE-184 | Yüksek8,8 | — | %0,6 | 4 Nis 2023 |
35İzleyin | CVE-2023-29008İstismar yok | SvelteKit framework has Insufficient CSRF protection for CORS requestssvelte · sveltekit · CWE-918 | Yüksek8,8 | — | %0,4 | 6 Nis 2023 |
34İzleyin | CVE-2026-82259İstismar yok | SvelteKit 2.49.0 before 2.53.3 Denial of Service via formsvelte · sveltekit · CWE-502 | Yüksek8,7 | — | %0,5 | 28 Ağu 2026 |
34İzleyin | CVE-2026-82261İstismar yok | SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserializationsvelte · sveltekit · CWE-400 | Yüksek8,7 | — | %0,5 | 28 Ağu 2026 |
34İzleyin | CVE-2026-82260İstismar yok | SvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserializationsvelte · sveltekit · CWE-400 | Yüksek8,7 | — | %0,5 | 28 Ağu 2026 |
33İzleyin | CVE-2025-67647İstismar yok | SvelteKit Denial of service and possible SSRF when using prerenderingsvelte · adapter-node · CWE-248 | Yüksek8,4 | — | %0,5 | 15 Oca 2026 |
32İzleyin | CVE-2026-40073İstismar yok | SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-nodesvelte · kit · CWE-770 | Yüksek8,2 | — | %1,0 | 10 Nis 2026 |
32İzleyin | CVE-2026-22803İstismar yok | SvelteKit has a memory amplification DoS in Remote Functions binary form deserializersvelte · kit · CWE-789 | Yüksek8,2 | — | %0,6 | 15 Oca 2026 |
31İzleyin | CVE-2021-29261İstismar yok | The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace consvelte · svelte | Yüksek7,8 | — | %1,2 | 5 Nis 2021 |
30İzleyin | CVE-2024-23641İstismar yok | Sending a GET or HEAD request with a body crashes SvelteKitsvelte · adapter-node · CWE-20 | Yüksek7,5 | — | %0,8 | 24 Oca 2024 |
30İzleyin | CVE-2026-42570İstismar yok | Svelte devalue: DoS via sparse array deserializationsvelte · devalue · CWE-770 | Yüksek7,5 | — | %0,7 | 9 Haz 2026 |
30İzleyin | CVE-2026-22774İstismar yok | devalue vulnerable to denial of service due to memory exhaustion in devalue.parsesvelte · devalue · CWE-405 | Yüksek7,5 | — | %0,6 | 15 Oca 2026 |
30İzleyin | CVE-2026-22775İstismar yok | devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parsesvelte · devalue · CWE-405 | Yüksek7,5 | — | %0,6 | 15 Oca 2026 |
27İzleyin | CVE-2026-82256İstismar yok | SvelteKit before 2.69.1 Denial of Service via Remote Formsvelte · sveltekit · CWE-400 | Orta6,9 | — | %0,4 | 28 Ağu 2026 |
25İzleyin | CVE-2026-40074İstismar yok | SvelteKit's invalidated redirect in handle hook causes Denial-of-Servicesvelte · kit · CWE-755 | Orta6,3 | — | %0,6 | 10 Nis 2026 |
25İzleyin | CVE-2026-30226İstismar yok | devalue has prototype pollution in devalue.parse and devalue.unflattensvelte · devalue · CWE-1321 | Orta6,3 | — | %0,5 | 11 Mar 2026 |
24İzleyin | CVE-2022-25875İstismar yok | Cross-site Scripting (XSS)svelte · svelte · CWE-79 | Orta6,1 | — | %1,4 | 12 Tem 2022 |
24İzleyin | CVE-2024-45047İstismar yok | Potential mXSS vulnerability due to improper HTML escaping in sveltesvelte · svelte · CWE-79 | Orta6,1 | — | %0,4 | 30 Ağu 2024 |
23İzleyin | CVE-2026-42567İstismar yok | Svelte: ReDoS in `<svelte:element>` Tag Validationsvelte · svelte · CWE-1333 | Orta5,9 | — | %0,4 | 9 Haz 2026 |
23İzleyin | CVE-2026-82258İstismar yok | SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batchsvelte · sveltekit · CWE-362 | Orta5,9 | — | %0,2 | 28 Ağu 2026 |
21İzleyin | CVE-2026-27125İstismar yok | Svelte SSR attribute spreading includes inherited properties from prototype chainsvelte · svelte · CWE-915 | Orta5,3 | — | %0,5 | 20 Şub 2026 |
21İzleyin | CVE-2026-27902İstismar yok | Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markerssvelte · svelte · CWE-79 | Orta5,3 | — | %0,4 | 25 Şub 2026 |
21İzleyin | CVE-2026-27901İstismar yok | Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`svelte · svelte · CWE-79 | Orta5,3 | — | %0,4 | 25 Şub 2026 |
21İzleyin | CVE-2026-82257İstismar yok | SvelteKit before 2.69.1 Prototype Pollution via File Inputsvelte · sveltekit · CWE-1321 | Orta5,3 | — | %0,4 | 28 Ağu 2026 |
21İzleyin | CVE-2025-15265İstismar yok | Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)svelte · svelte · CWE-79 | Orta5,3 | — | %0,4 | 15 Oca 2026 |
- CVE-2023-2900335İzleyin
SvelteKit has Insufficient Cross-Site Request Forgery Protection
YüksekCVSS 8,8İstismar yokEPSS %1svelte · sveltekit4 Nis 2023
- CVE-2023-2900835İzleyin
SvelteKit framework has Insufficient CSRF protection for CORS requests
YüksekCVSS 8,8İstismar yokEPSS %0svelte · sveltekit6 Nis 2023
- CVE-2026-8225934İzleyin
SvelteKit 2.49.0 before 2.53.3 Denial of Service via form
YüksekCVSS 8,7İstismar yokEPSS %1svelte · sveltekit28 Ağu 2026
- CVE-2026-8226134İzleyin
SvelteKit before 2.52.2 CPU Exhaustion via Remote Form Deserialization
YüksekCVSS 8,7İstismar yokEPSS %0svelte · sveltekit28 Ağu 2026
- CVE-2026-8226034İzleyin
SvelteKit before 2.52.2 Memory Exhaustion via Remote Form Deserialization
YüksekCVSS 8,7İstismar yokEPSS %0svelte · sveltekit28 Ağu 2026
- CVE-2025-6764733İzleyin
SvelteKit Denial of service and possible SSRF when using prerendering
YüksekCVSS 8,4İstismar yokEPSS %1svelte · adapter-node15 Oca 2026
- CVE-2026-4007332İzleyin
SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
YüksekCVSS 8,2İstismar yokEPSS %1svelte · kit10 Nis 2026
- CVE-2026-2280332İzleyin
SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer
YüksekCVSS 8,2İstismar yokEPSS %1svelte · kit15 Oca 2026
- CVE-2021-2926131İzleyin
The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace con
YüksekCVSS 7,8İstismar yokEPSS %1svelte · svelte5 Nis 2021
- CVE-2024-2364130İzleyin
Sending a GET or HEAD request with a body crashes SvelteKit
YüksekCVSS 7,5İstismar yokEPSS %1svelte · adapter-node24 Oca 2024
- CVE-2026-4257030İzleyin
Svelte devalue: DoS via sparse array deserialization
YüksekCVSS 7,5İstismar yokEPSS %1svelte · devalue9 Haz 2026
- CVE-2026-2277430İzleyin
devalue vulnerable to denial of service due to memory exhaustion in devalue.parse
YüksekCVSS 7,5İstismar yokEPSS %1svelte · devalue15 Oca 2026
- CVE-2026-2277530İzleyin
devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
YüksekCVSS 7,5İstismar yokEPSS %1svelte · devalue15 Oca 2026
- CVE-2026-8225627İzleyin
SvelteKit before 2.69.1 Denial of Service via Remote Form
OrtaCVSS 6,9İstismar yokEPSS %0svelte · sveltekit28 Ağu 2026
- CVE-2026-4007425İzleyin
SvelteKit's invalidated redirect in handle hook causes Denial-of-Service
OrtaCVSS 6,3İstismar yokEPSS %1svelte · kit10 Nis 2026
- CVE-2026-3022625İzleyin
devalue has prototype pollution in devalue.parse and devalue.unflatten
OrtaCVSS 6,3İstismar yokEPSS %0svelte · devalue11 Mar 2026
- CVE-2022-2587524İzleyin
Cross-site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %1svelte · svelte12 Tem 2022
- CVE-2024-4504724İzleyin
Potential mXSS vulnerability due to improper HTML escaping in svelte
OrtaCVSS 6,1İstismar yokEPSS %0svelte · svelte30 Ağu 2024
- CVE-2026-4256723İzleyin
Svelte: ReDoS in `<svelte:element>` Tag Validation
OrtaCVSS 5,9İstismar yokEPSS %0svelte · svelte9 Haz 2026
- CVE-2026-8225823İzleyin
SvelteKit 2.38.0 before 2.60.1 Cross-User Data Disclosure via query.batch
OrtaCVSS 5,9İstismar yokEPSS %0svelte · sveltekit28 Ağu 2026
- CVE-2026-2712521İzleyin
Svelte SSR attribute spreading includes inherited properties from prototype chain
OrtaCVSS 5,3İstismar yokEPSS %0svelte · svelte20 Şub 2026
- CVE-2026-2790221İzleyin
Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers
OrtaCVSS 5,3İstismar yokEPSS %0svelte · svelte25 Şub 2026
- CVE-2026-2790121İzleyin
Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`
OrtaCVSS 5,3İstismar yokEPSS %0svelte · svelte25 Şub 2026
- CVE-2026-8225721İzleyin
SvelteKit before 2.69.1 Prototype Pollution via File Input
OrtaCVSS 5,3İstismar yokEPSS %0svelte · sveltekit28 Ağu 2026
- CVE-2025-1526521İzleyin
Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR)
OrtaCVSS 5,3İstismar yokEPSS %0svelte · svelte15 Oca 2026