sveltejs/svelte
main@ 4d2ad8aFixes2
CVEs13
Peak severityHigh
Commits9,892
Regression coverage100.0%
Highlights
Cross-Site Scripting: 2 prior fixes. Scrutinize any change in this area.
packages/svelte/src/internal/server/hydratable.js: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Cross-Site Scripting: 1 historical fix(es) link src/compiler/compile/render_ssr/handlers/Element.ts to Cross-Site Scripting.
Cross-Site Scripting: 1 historical fix(es) link packages/svelte/src/internal/server/hydratable.js to Cross-Site Scripting.
Last analyzed 13 Oct 2026, 16:20 UTC