Skip to content

Svelte affected by cross-site scripting via spread attributes in Svelte SSR

Moderate severity GitHub Reviewed Published Feb 18, 2026 in sveltejs/svelte • Updated Feb 23, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts