CVEs affecting the Svelte ecosystem

T1Covered by 1 source · first reported by Framework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter at 15 Jan, 00:00 UTC

We’ve released patches for 5 vulnerabilities across devalue, svelte, @sveltejs/kit, and @sveltejs/adapter-node. Here’s what you need to know: Upgrade now If you’re using any of these packages, upgrade them to their corresponding non-vulnerable versions: devalue: 5.6.2 svelte: 5.46.4 @sveltejs/kit…

devreleasessecurity

Sources

• T1CVEs affecting the Svelte ecosystemFramework blogs: Next.js releases / Svelte / Angular / Django / Rails / Laravel / Spring / React Native / Flutter15 Jan, 00:00