cve.nowby Sazabi

Package

@astrojs/svelte

1 known CVE (1 low), with the versions each affects and the releases that fix them.

npm

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 1 · 1 low

Registry: npm

Advisories 1

CVE-2026-126362Low 2.3
Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
Affected: from 5.7.3, fixed in 9.1.2.