Dismissed
by @pyrox0 Activity log
- Created automatic suggestion
-
@pyrox0
removed
10 packages
- svelte-check
- svelte-language-server
- nodePackages.svelte-check
- nodePackages_latest.svelte-check
- vscode-extensions.svelte.svelte-vscode
- tree-sitter-grammars.tree-sitter-svelte
- vimPlugins.nvim-treesitter-parsers.svelte
- python312Packages.tree-sitter-grammars.tree-sitter-svelte
- python313Packages.tree-sitter-grammars.tree-sitter-svelte
- python314Packages.tree-sitter-grammars.tree-sitter-svelte
- @pyrox0 dismissed
Svelte affected by XSS in SSR `<option>` element
svelte performance oriented web framework. From 5.39.3, <=5.51.4, in certain circumstances, the server-side rendering output of an <option> element does not properly escape its content, potentially allowing HTML injection in the SSR output. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5.
References
- https://github.com/sveltejs/svelte/security/advisories/GHSA-h7h7-mm68-gmrc x_refsource_CONFIRM
Affected products
svelte
- ==>= 5.39.3, < 5.51.5
Ignored packages (10)
pkgs.svelte-check
Svelte code checker
pkgs.svelte-language-server
Language server (implementing the language server protocol) for Svelte
pkgs.nodePackages.svelte-check
Svelte Code Checker Terminal Interface
pkgs.nodePackages_latest.svelte-check
Svelte Code Checker Terminal Interface
pkgs.vscode-extensions.svelte.svelte-vscode
Svelte language support for VS Code
pkgs.tree-sitter-grammars.tree-sitter-svelte
None
-
nixos-unstable 0.0.0+rev=ae5199d
- nixpkgs-unstable 0.0.0+rev=ae5199d
- nixos-unstable-small 0.0.0+rev=ae5199d
pkgs.python312Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte
pkgs.python313Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte
pkgs.python314Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte