An open index of dependabot pull requests across open source projects.

@sveltejs/kit

Ecosystem:
npm
Package URL:
pkg:npm/@sveltejs/kit
Total PRs:
4,629 Dependabot PRs
Latest PR:
about 2 hours ago
Unique Repositories:
901 repositories
Unique Repos (30 days):
387 repositories
Security Advisories
@sveltejs/kit vulnerable to XSS on dev mode 404 page
GHSA-rjjv-87mx-6x3h CVE-2024-53261 LOW published 10 months ago • updated 23 days ago
### Summary "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may res...
Sending a GET or HEAD request with a body crashes SvelteKit
GHSA-g5m6-hxpp-fc49 CVE-2024-23641 HIGH published over 1 year ago • updated 3 months ago
### Summary In SvelteKit 2 sending a GET request with a body eg `{}` to a SvelteKit app in preview or with `adapter-node` throws `Request with GET/...
@sveltejs/kit has unescaped error message included on error page
GHSA-mh2x-fcqh-fmqv CVE-2024-53262 LOW published 10 months ago • updated 29 days ago
### Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. ### Details Fr...
SvelteKit framework has Insufficient CSRF protection for CORS requests
GHSA-gv7g-x59x-wf8f CVE-2023-29008 HIGH published over 2 years ago • updated 3 months ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
GHSA-6q87-84jw-cjhp CVE-2025-32388 MODERATE published 5 months ago • updated 25 days ago
### Summary Unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of `event.url.searchParams` i...
Recent PRs
Package Details
Name: @sveltejs/kit
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@sveltejs/kit
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 3
MODERATE 1
LOW 2
View All npm Advisories
Package Information
Description:

SvelteKit is the fastest way to build Svelte apps

Repository: https://github.com/sveltejs/kit
Homepage: https://svelte.dev
Latest Release: 2.21.2
3 months ago
Dependent Repos: 17,842
Dependent Packages: 3,630
Downloads: 2,265,474
Ranking: Top 0.2122% by dependent repos Top 0.2722% by downloads Top 0.0325% by dependent pkgs
PR Status
Open 1,863 (40.4%)
Merged 1,080 (23.4%)
Closed 1,168 (25.3%)
PR Types
Minor 2,853 (61.8%)
Major 182 (3.9%)
Patch 1,070 (23.2%)