Svelte — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Svelte, with AI-generated Chinese analysis, references, and POCs.

Vendor: n/a

CVE ID	Title	CVSS	Severity	Published
CVE-2026-27902	Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers CWE-79	6.1^AI	Medium^AI	2026-02-26
CVE-2026-27901	Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent` CWE-79	6.1^AI	Medium^AI	2026-02-26
CVE-2026-27125	Svelte SSR attribute spreading includes inherited properties from prototype chain CWE-915	3.7	-	2026-02-20
CVE-2026-27122	Svelte SSR does not validate dynamic element tag names in `<svelte:element>` CWE-79	6.1	-	2026-02-20
CVE-2026-27121	Svelte affected by cross-site scripting via spread attributes in Svelte SSR CWE-79	6.1	-	2026-02-20
CVE-2026-27119	Svelte affected by XSS in SSR `<option>` element CWE-79	6.1	-	2026-02-20
CVE-2025-15265	Svelte 5.46.0 - Hydratable Key Script-Breakout XSS (SSR) CWE-79	6.1^AI	Medium^AI	2026-01-15
CVE-2024-45047	Potential mXSS vulnerability due to improper HTML escaping in svelte CWE-79	5.4	Medium	2024-08-30
CVE-2022-25875	Cross-site Scripting (XSS)	5.4	Medium	2022-07-12

All 9 known CVE vulnerabilities affecting Svelte with full Chinese analysis, references, and POCs where available.