Dismissed
by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
10 packages
- svelte-check
- svelte-language-server
- nodePackages.svelte-check
- nodePackages_latest.svelte-check
- vscode-extensions.svelte.svelte-vscode
- tree-sitter-grammars.tree-sitter-svelte
- vimPlugins.nvim-treesitter-parsers.svelte
- python312Packages.tree-sitter-grammars.tree-sitter-svelte
- python313Packages.tree-sitter-grammars.tree-sitter-svelte
- python314Packages.tree-sitter-grammars.tree-sitter-svelte
- @LeSuisse dismissed
Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers
Svelte performance oriented web framework. Prior to version 5.53.5, errors from `transformError` were not correctly escaped prior to being embedded in the HTML output, causing potential HTML injection and XSS if attacker-controlled content is returned from `transformError`. Version 5.53.5 fixes the issue.
References
- https://github.com/sveltejs/svelte/security/advisories/GHSA-qgvg-pr8v-6rr3 x_refsource_CONFIRM
- https://github.com/sveltejs/svelte/commit/0298e979371bb583855c9810db79a70a551d22b9 x_refsource_MISC
- https://github.com/sveltejs/svelte/releases/tag/svelte%405.53.5 x_refsource_MISC
Affected products
svelte
- ==>= 5.53.0, < 5.53.5
Ignored packages (10)
pkgs.svelte-check
Svelte code checker
pkgs.svelte-language-server
Language server (implementing the language server protocol) for Svelte
pkgs.nodePackages.svelte-check
Svelte Code Checker Terminal Interface
pkgs.nodePackages_latest.svelte-check
Svelte Code Checker Terminal Interface
pkgs.vscode-extensions.svelte.svelte-vscode
Svelte language support for VS Code
pkgs.tree-sitter-grammars.tree-sitter-svelte
None
-
nixos-unstable 0.0.0+rev=ae5199d
- nixpkgs-unstable 0.0.0+rev=ae5199d
- nixos-unstable-small 0.0.0+rev=ae5199d
pkgs.python312Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte
pkgs.python313Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte
pkgs.python314Packages.tree-sitter-grammars.tree-sitter-svelte
Python bindings for tree-sitter-svelte