https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 15:08:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-270788 EUVD-2026-270788 https://cve.radiocsirt.org/vuln/euvd-2026-270788 https://cve.radiocsirt.org/vuln/fkie_cve-2026-27125 <p>svelte performance oriented web framework. Prior to 5.51.5, in server-side rendering, attribute spreading on elements (e.g. &lt;div {...attrs}&gt;) enumerates inherited properties from the object&#39;s prototype chain rather than only own properties. In environments where Object.prototype has already been polluted — a precondition outside of Svelte&#39;s control — this can cause unexpected attributes to appear in SSR output or cause SSR to throw errors. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5.</p> <p>svelte performance oriented web framework. Prior to 5.51.5, in server-side rendering, attribute spreading on elements (e.g. &lt;div {...attrs}&gt;) enumerates inherited properties from the object&#39;s prototype chain rather than only own properties. In environments where Object.prototype has already been polluted — a precondition outside of Svelte&#39;s control — this can cause unexpected attributes to appear in SSR output or cause SSR to throw errors. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-27125 https://cve.radiocsirt.org/vuln/ghsa-crpf-4hrx-3jrp <p><strong>Affected:</strong> npm: svelte</p> <p>In server-side rendering, attribute spreading on elements (e.g. `&lt;div {...attrs}&gt;`) enumerates inherited properties from the object&#39;s prototype chain rather than only own properties. In environments where `Object.prototype` has already been polluted — a precondition outside of Svelte&#39;s control — this can cause unexpected attributes to appear in SSR output or cause SSR to throw errors. Client-side rendering is not affected.</p> <p><strong>Affected:</strong> npm: svelte</p> <p>In server-side rendering, attribute spreading on elements (e.g. `&lt;div {...attrs}&gt;`) enumerates inherited properties from the object&#39;s prototype chain rather than only own properties. In environments where `Object.prototype` has already been polluted — a precondition outside of Svelte&#39;s control — this can cause unexpected attributes to appear in SSR output or cause SSR to throw errors. Client-side rendering is not affected.</p> https://cve.radiocsirt.org/vuln/ghsa-crpf-4hrx-3jrp