CVE-2026-42573 | BDVDB-2026-338993 Detail
sveltejssvelte
Description#
Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This issue has been patched in version 5.55.7.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
References#
- https://github.com/sveltejs/svelte/security/advisories/GHSA-rcqx-6q8c-2c42
- https://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
- https://access.redhat.com/security/cve/CVE-2026-42573
- https://bugzilla.redhat.com/show_bug.cgi?id=2487093
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42573.json
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.