CVE-2024-45047

svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not including 4.2.19. Svelte improperly escapes HTML on server-side rendering. The assumption is that attributes will always stay as such, but in some situation the final DOM tree...

CVE-2024-45047

creationtimestamp| type| source ---|---|--- 2024-08-30 19:49:51+00:00| seen| https://t.me/cvedetector/4536...

@58860ed6ffd9e897/gold-finger-extension (1.0.2), @absolutejs/absolute (>=0.1.0, <=0.1.19) +59 more potentially affected by CVE-2024-45047 via svelte (>=4.0.0, <=4.2.18)

svelte NPM version =4.0.0, =0.1.0, =0.84.3, =7.4.0, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =0.0.0-52469075, =4.0.0, =8.0.4, =1.0.5, =1.0.6, =1.1.1 and more Source cves: CVE-2024-45047 Source advisory: OSV:GHSA-8266-84WP-WV5C...