https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 08:08:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-326009 EUVD-2026-326009 https://cve.radiocsirt.org/vuln/euvd-2026-326009 https://cve.radiocsirt.org/vuln/fkie_cve-2026-42567 <p>Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in &lt;svelte:element this={tag}&gt;&lt;/svelte:element&gt;. This issue has been patched in version 5.55.7.</p> <p>Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in &lt;svelte:element this={tag}&gt;&lt;/svelte:element&gt;. This issue has been patched in version 5.55.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-42567 https://cve.radiocsirt.org/vuln/ghsa-9rmh-mm8f-r9h6 <p><strong>Affected:</strong> npm: svelte</p> <p>An internal regex in the Svelte runtime can take exponential time to test in `&lt;svelte:element this={tag}&gt;&lt;/svelte:element&gt;`. You are only vulnerable to this if you allow tags of unconstrained length. If your application only allows a predetermined list of tags or trims their length before passing them to `svelte:element`, you are safe.</p> <p><strong>Affected:</strong> npm: svelte</p> <p>An internal regex in the Svelte runtime can take exponential time to test in `&lt;svelte:element this={tag}&gt;&lt;/svelte:element&gt;`. You are only vulnerable to this if you allow tags of unconstrained length. If your application only allows a predetermined list of tags or trims their length before passing them to `svelte:element`, you are safe.</p> https://cve.radiocsirt.org/vuln/ghsa-9rmh-mm8f-r9h6