Alta
CVE-2026-92708
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 46
Restablecer filtros
Media
ghsa-4q55-j62x-fr9h
devalue: Malformed null-prototype object keys bypass __proto__ rejection via property-key coercion
Media
CVE-2026-81176
Svelte devalue: DoS via malformed input
Media
CVE-2026-66062
SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header
Media
CVE-2026-82257
SvelteKit: Prototype pollution in file input deletion path in remote-function forms
Media
CVE-2026-82256
SvelteKit: Big remote form function payloads can cause Node process to crash
Media
CVE-2026-82258
@sveltejs/kit: `query.batch` cross-talk
Media
ghsa-f3cj-j4f6-wq85
Svelte: SSR XSS via Insecure Promise Serialization in hydratable
Media
CVE-2026-42573
Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State
Media
CVE-2026-42567
Svelte: ReDoS in `<svelte:element>` Tag Validation
Alta
CVE-2026-45665
Open WebUI has Stored XSS in Banner Component via Improper Sanitization Order
Alta
CVE-2026-42570
Svelte devalue: DoS via sparse array deserialization
Media
CVE-2026-42599
Svelte SSR vulnerable to cross-site scripting via spread attributes
Alta
CVE-2026-44721
open-webui Vulnerable to Stored XSS via Model Description
Baja
CVE-2026-6216
DbGate has cross site scripting via the SVG Icon String Handler component
Media
CVE-2026-40074
@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service
Alta
CVE-2026-40073
@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass
Alta
CVE-2026-34725
dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration
Baja
ghsa-mwv9-gp5h-frr4
Sveltejs devalue's `devalue.parse` and `devalue.unflatten` emit objects with `__proto__` own properties
Baja
CVE-2026-82259
SvelteKit has deserialization expansion in unvalidated `form` remote function leading to Denial of Service (experimental only)
Media
CVE-2026-27902
Svelte: XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers
Media
CVE-2026-27901
Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`
Media
CVE-2026-82261
CPU exhaustion in SvelteKit remote form deserialization (experimental only)
Media
CVE-2026-82260
Memory exhaustion in SvelteKit remote form deserialization (experimental only)
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.