CVE-2024-45047

svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-side rendering. The assumption is that attributes will always stay as such, but in some situation the final DOM tree...

CVE-2024-45047

creationtimestamp| type| source ---|---|--- 2024-08-30 19:49:51+00:00| seen| https://t.me/cvedetector/4536...

5sg (>=0.0.2 <=0.0.8), @1stg/app-config (>=4.0.0 <=7.3.0) +2067 more potentially affected by CVE-2024-45047 via svelte (>=0.0.1 <=4.2.18)

svelte NPM version =0.0.1, =0.0.2, =4.0.0, =4.0.0, =6.0.0, =2.2.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =10.9.0, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.0.0 - @albertaz/r2s-cli =1.0.1-alpha.0 and more Source cves: CVE-2024-45047 Source advisory: OSV:GHSA-8266-84WP-WV5C...