3 matches found
EUVD-2026-8800
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers...
5.3CVSS5.2AI score0.00226EPSS
SaveExploits0References5
CVE-2026-27902
Svelte performance oriented web framework. Prior to version 5.53.5, errors from transformError were not correctly escaped prior to being embedded in the HTML output, causing potential HTML injection and XSS if attacker-controlled content is returned from transformError. Version 5.53.5 fixes the...
5.4CVSS0.00226EPSS
SaveExploits0References3
PT-2026-22077
Svelte performance oriented web framework. Prior to version 5.53.5, errors from transformError were not correctly escaped prior to being embedded in the HTML output, causing potential HTML injection and XSS if attacker-controlled content is returned from transformError. Version 5.53.5 fixes the...
5.3CVSS5.3AI score0.00226EPSS
SaveExploits0References3
20