@alexaegis/svelte-config (>=0.5.7, <=0.14.1), @good-energy/elements (0.0.1) +22 more potentially affected by CVE-2026-27118 via @sveltejs/adapter-vercel (>=1.0.0-next.31, <=5.10.3)

@sveltejs/adapter-vercel NPM version =1.0.0-next.31, =0.5.7, =0.0.32, =1.0.3, =1.0.0, =1.0.4, =0.12.3, =1.0.0, =0.0.1-beta.153, =1.0.0-next.1, =2.1.1, =2.4.44 - @wabosh/navigation-loader 0.1.0 and more Source cves: CVE-2026-27118 Source advisory: MEND:CVE-2026-27118...

CVE-2026-27118: Origin Validation Error

SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Versions of @sveltejs/adapter-vercel prior to 6.3.2 are vulnerable to cache poisoning. An internal query parameter intended for Incremental Static Regeneration ISR is accessible on all routes, allowi...