Advisories · Technology

sveltejs kit.

Every CVE that names sveltejs kit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114063 CVE record

CVSS 8.7 High

SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows
- sveltejs kit
- Path traversal
Not analysed yet 21 Oct 2026
CVE-2026-114062 CVE record

CVSS 6.9 Medium

SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks
- sveltejs kit
- Server-side request forgery (SSRF)
Not analysed yet 21 Oct 2026