VULNERABILITY INTELLIGENCE

CVE-2026-42573

CVSS score6.1 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-06-09
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework state on elements, potentially leading to XSS attacks. This issue has been patched in version 5.55.7.

Weakness classification

  • security-advisories@github.com: CWE-79
  • 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-79

Primary references