https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 05:34:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-185338 EUVD-2026-185338 https://cve.radiocsirt.org/vuln/euvd-2026-185338 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25875 <p>The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.</p> <p>The package svelte before 3.49.0 are vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-25875 https://cve.radiocsirt.org/vuln/ghsa-wv8q-r932-8hc7 <p><strong>Affected:</strong> npm: svelte</p> <p>The package svelte before 3.49.0 is vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.</p> <p><strong>Affected:</strong> npm: svelte</p> <p>The package svelte before 3.49.0 is vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.</p> https://cve.radiocsirt.org/vuln/ghsa-wv8q-r932-8hc7 https://cve.radiocsirt.org/vuln/gsd-2022-25875 gsd-2022-25875 https://cve.radiocsirt.org/vuln/gsd-2022-25875