exploitDog

CVE-2026-42567

Опубликовано: 09 июн. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:element this={tag}></svelte:element>. This issue has been patched in version 5.55.7.

Ссылки

https://github.com/sveltejs/svelte/releases/tag/svelte%405.55.7
Product
Release Notes
https://github.com/sveltejs/svelte/security/advisories/GHSA-9rmh-mm8f-r9h6
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:svelte:svelte:*:*:*:*:*:node.js:*:*

Версия от 5.51.5 (включая) до 5.55.7 (исключая)

EPSS

Процентиль: 35%

0.00421

Низкий

7.5 High

CVSS3

Дефекты

CWE-1333

Связанные уязвимости

CVE-2026-42567

CVSS3: 5.9

redhat

2 месяца назад

Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:element this={tag}></svelte:element>. This issue has been patched in version 5.55.7.

GHSA-9rmh-mm8f-r9h6

github

3 месяца назад

Svelte: ReDoS in `<svelte:element>` Tag Validation

EPSS

Процентиль: 35%

0.00421

Низкий

7.5 High

CVSS3

Дефекты

CWE-1333