Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-cxqy-4aua-v3bt
Summary
Svelte: SSR XSS via Insecure Promise Serialization in hydratable
Contents of `hydratable` promises were not properly stringified, potentially leading to an XSS exploit. You are vulnerable if all of the following is true:
- you are using `hydratable` (an experimental feature at the time of this report)
- you are passing attacker-controlled input such that a synchronous value is hydrated, then a promise value, e.g. `hydratable('someKey', () => [synchronousValue, promiseValue])`
Aliases
0
alias GHSA-f3cj-j4f6-wq85
Fixed_packages
0
url pkg:npm/svelte@5.55.7
purl pkg:npm/svelte@5.55.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.7
Affected_packages
0
url pkg:npm/svelte@5.46.0
purl pkg:npm/svelte@5.46.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eccr-c8xw-rqcn
4
vulnerability VCID-eub6-k2yh-suhb
5
vulnerability VCID-vbz4-avaq-7kh6
6
vulnerability VCID-w8kg-2qq6-xyet
7
vulnerability VCID-x1g1-8b9m-5yhz
8
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.46.0
1
url pkg:npm/svelte@5.46.1
purl pkg:npm/svelte@5.46.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eccr-c8xw-rqcn
4
vulnerability VCID-eub6-k2yh-suhb
5
vulnerability VCID-vbz4-avaq-7kh6
6
vulnerability VCID-w8kg-2qq6-xyet
7
vulnerability VCID-x1g1-8b9m-5yhz
8
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.46.1
2
url pkg:npm/svelte@5.46.3
purl pkg:npm/svelte@5.46.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eccr-c8xw-rqcn
4
vulnerability VCID-eub6-k2yh-suhb
5
vulnerability VCID-vbz4-avaq-7kh6
6
vulnerability VCID-w8kg-2qq6-xyet
7
vulnerability VCID-x1g1-8b9m-5yhz
8
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.46.3
3
url pkg:npm/svelte@5.46.4
purl pkg:npm/svelte@5.46.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.46.4
4
url pkg:npm/svelte@5.47.0
purl pkg:npm/svelte@5.47.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.47.0
5
url pkg:npm/svelte@5.47.1
purl pkg:npm/svelte@5.47.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.47.1
6
url pkg:npm/svelte@5.48.0
purl pkg:npm/svelte@5.48.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.0
7
url pkg:npm/svelte@5.48.1
purl pkg:npm/svelte@5.48.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.1
8
url pkg:npm/svelte@5.48.2
purl pkg:npm/svelte@5.48.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.2
9
url pkg:npm/svelte@5.48.3
purl pkg:npm/svelte@5.48.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.3
10
url pkg:npm/svelte@5.48.4
purl pkg:npm/svelte@5.48.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.4
11
url pkg:npm/svelte@5.48.5
purl pkg:npm/svelte@5.48.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.48.5
12
url pkg:npm/svelte@5.49.0
purl pkg:npm/svelte@5.49.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.49.0
13
url pkg:npm/svelte@5.49.1
purl pkg:npm/svelte@5.49.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.49.1
14
url pkg:npm/svelte@5.49.2
purl pkg:npm/svelte@5.49.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.49.2
15
url pkg:npm/svelte@5.50.0
purl pkg:npm/svelte@5.50.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.50.0
16
url pkg:npm/svelte@5.50.1
purl pkg:npm/svelte@5.50.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.50.1
17
url pkg:npm/svelte@5.50.2
purl pkg:npm/svelte@5.50.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.50.2
18
url pkg:npm/svelte@5.50.3
purl pkg:npm/svelte@5.50.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.50.3
19
url pkg:npm/svelte@5.51.0
purl pkg:npm/svelte@5.51.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.0
20
url pkg:npm/svelte@5.51.1
purl pkg:npm/svelte@5.51.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.1
21
url pkg:npm/svelte@5.51.2
purl pkg:npm/svelte@5.51.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.2
22
url pkg:npm/svelte@5.51.3
purl pkg:npm/svelte@5.51.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.3
23
url pkg:npm/svelte@5.51.4
purl pkg:npm/svelte@5.51.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-4hh1-vzj8-bqfy
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-w8kg-2qq6-xyet
6
vulnerability VCID-x1g1-8b9m-5yhz
7
vulnerability VCID-zmre-1nsj-9ug6
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.4
24
url pkg:npm/svelte@5.51.5
purl pkg:npm/svelte@5.51.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-eub6-k2yh-suhb
3
vulnerability VCID-vbz4-avaq-7kh6
4
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.51.5
25
url pkg:npm/svelte@5.52.0
purl pkg:npm/svelte@5.52.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-eub6-k2yh-suhb
3
vulnerability VCID-vbz4-avaq-7kh6
4
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.52.0
26
url pkg:npm/svelte@5.53.0
purl pkg:npm/svelte@5.53.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-6vyz-9hn8-fke1
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.0
27
url pkg:npm/svelte@5.53.1
purl pkg:npm/svelte@5.53.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-6vyz-9hn8-fke1
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.1
28
url pkg:npm/svelte@5.53.2
purl pkg:npm/svelte@5.53.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-6vyz-9hn8-fke1
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.2
29
url pkg:npm/svelte@5.53.3
purl pkg:npm/svelte@5.53.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-6vyz-9hn8-fke1
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.3
30
url pkg:npm/svelte@5.53.4
purl pkg:npm/svelte@5.53.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-6vyz-9hn8-fke1
2
vulnerability VCID-cxqy-4aua-v3bt
3
vulnerability VCID-eub6-k2yh-suhb
4
vulnerability VCID-vbz4-avaq-7kh6
5
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.4
31
url pkg:npm/svelte@5.53.5
purl pkg:npm/svelte@5.53.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.5
32
url pkg:npm/svelte@5.53.6
purl pkg:npm/svelte@5.53.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.6
33
url pkg:npm/svelte@5.53.7
purl pkg:npm/svelte@5.53.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.7
34
url pkg:npm/svelte@5.53.8
purl pkg:npm/svelte@5.53.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.8
35
url pkg:npm/svelte@5.53.9
purl pkg:npm/svelte@5.53.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.9
36
url pkg:npm/svelte@5.53.10
purl pkg:npm/svelte@5.53.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.10
37
url pkg:npm/svelte@5.53.11
purl pkg:npm/svelte@5.53.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.11
38
url pkg:npm/svelte@5.53.12
purl pkg:npm/svelte@5.53.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.12
39
url pkg:npm/svelte@5.53.13
purl pkg:npm/svelte@5.53.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.53.13
40
url pkg:npm/svelte@5.54.0
purl pkg:npm/svelte@5.54.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.54.0
41
url pkg:npm/svelte@5.54.1
purl pkg:npm/svelte@5.54.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.54.1
42
url pkg:npm/svelte@5.55.0
purl pkg:npm/svelte@5.55.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.0
43
url pkg:npm/svelte@5.55.1
purl pkg:npm/svelte@5.55.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.1
44
url pkg:npm/svelte@5.55.2
purl pkg:npm/svelte@5.55.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.2
45
url pkg:npm/svelte@5.55.3
purl pkg:npm/svelte@5.55.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.3
46
url pkg:npm/svelte@5.55.4
purl pkg:npm/svelte@5.55.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.4
47
url pkg:npm/svelte@5.55.5
purl pkg:npm/svelte@5.55.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.5
48
url pkg:npm/svelte@5.55.6
purl pkg:npm/svelte@5.55.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3338-judc-5ke1
1
vulnerability VCID-cxqy-4aua-v3bt
2
vulnerability VCID-vbz4-avaq-7kh6
3
vulnerability VCID-ycam-n781-gkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/svelte@5.55.6
References
0
reference_url http://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
1
reference_url https://github.com/sveltejs/svelte
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sveltejs/svelte
2
reference_url https://github.com/sveltejs/svelte/commit/a16ebc67bbcf8f708360195687e1b2719463e1a4
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sveltejs/svelte/commit/a16ebc67bbcf8f708360195687e1b2719463e1a4
3
reference_url https://github.com/sveltejs/svelte/security/advisories/GHSA-f3cj-j4f6-wq85
reference_id
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/sveltejs/svelte/security/advisories/GHSA-f3cj-j4f6-wq85
4
reference_url https://github.com/advisories/GHSA-f3cj-j4f6-wq85
reference_id GHSA-f3cj-j4f6-wq85
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f3cj-j4f6-wq85
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-cxqy-4aua-v3bt