Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@sveltejs/kit

Ecosystem:
npm
Package URL:
pkg:npm/@sveltejs/kit
Total PRs:
6,331 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
1,078 repositories
Unique Repos (30 days):
121 repositories
Security Advisories
SvelteKit framework has Insufficient CSRF protection for CORS requests
GHSA-gv7g-x59x-wf8f CVE-2023-29008 HIGH published over 2 years ago • updated 1 day ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
Sending a GET or HEAD request with a body crashes SvelteKit
GHSA-g5m6-hxpp-fc49 CVE-2024-23641 HIGH published almost 2 years ago • updated 2 days ago
### Summary In SvelteKit 2 sending a GET request with a body eg `{}` to a SvelteKit app in preview or with `adapter-node` throws `Request with GET/...
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
GHSA-6q87-84jw-cjhp CVE-2025-32388 MODERATE published 7 months ago • updated 4 days ago
### Summary Unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of `event.url.searchParams` i...
SvelteKit vulnerable to Cross-Site Request Forgery
GHSA-5p75-vc5g-8rv2 CVE-2023-29003 HIGH published over 2 years ago • updated 3 days ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
@sveltejs/kit vulnerable to XSS on dev mode 404 page
GHSA-rjjv-87mx-6x3h CVE-2024-53261 LOW published 12 months ago • updated 4 days ago
### Summary "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may res...
View all 6 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
chore(deps-dev): Bump the dev-dependencies group with 3 updates

yanneves/browser.icu #290

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago 1 comment
yanneves
Bump the sveltes group with 3 updates

Mapy542/portfolio #34

2.36.2 → 2.36.3 Patch PR
Open 3 months ago 1 comment
Mapy542
chore: Bump @sveltejs/kit from 2.36.2 to 2.36.3

rafal-majewski/resume-builder #492

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
rafal-majewski
Bump the svelte group across 1 directory with 3 updates

ttoino/website #84

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago 1 comment
ttoino
Bump the sveltekit group with 4 updates

poad/sveltekit-minimal-example #409

2.36.2 → 2.36.3 Patch PR
Open 3 months ago 2 comments
poad
npm-dep: bump @sveltejs/kit from 2.36.2 to 2.36.3 in /frontend

seriousm4x/UpSnap #1329

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
seriousm4x
Bump @sveltejs/kit from 2.36.1 to 2.36.3 in /cornucopia.owasp.org

OWASP/cornucopia #1602

2.36.1 → 2.36.3 Patch PR
Merged 3 months ago 2 comments
OWASP
build(deps-dev): bump @sveltejs/kit from 2.36.2 to 2.36.3

coreproject-moe/coreproject-moe.github.io #544

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago
coreproject-moe
chore(deps-dev): Bump @sveltejs/kit from 2.36.2 to 2.36.3

podman-desktop/podman-desktop-catalog #707

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago
podman-desktop
Bump the all group with 2 updates

danielosw/danielosw.github.io #211

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
danielosw
build(deps): bump the fe-dependencies group in /frontend-svelte with 4 updates

fabXlabs/fabX #733

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago
fabXlabs
chore: bump @sveltejs/kit from 2.36.2 to 2.36.3

rafal-majewski/recursive-triangles #372

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago
rafal-majewski
chore(deps-dev): bump @sveltejs/kit from 2.36.2 to 2.36.3

MikevPeeren/sveltekit-typescript-tailwindcss-sass-starter #864

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
MikevPeeren
Bump @sveltejs/kit from 2.36.2 to 2.36.3

codyatwork/svelte-stock-watcher #725

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
codyatwork
build(deps-dev): bump the nodejs-dependencies group with 3 updates

locusts-r-us/locusts #257

2.36.2 → 2.36.3 Patch PR
Open 3 months ago 1 comment
locusts-r-us
Bump @sveltejs/kit from 2.36.2 to 2.36.3

palacms/PalaCMS #525

2.36.2 → 2.36.3 Patch PR
Open 3 months ago
palacms
chore(deps-dev): Bump the dev-dependencies group with 7 updates

yanneves/browser.icu #289

2.36.1 → 2.36.2 Patch PR
Open 3 months ago 1 comment
yanneves
ci: bump @sveltejs/kit from 2.36.2 to 2.36.3

Attacktive/troubleshooter-editor-front-end-svelte #952

2.36.2 → 2.36.3 Patch PR
Merged 3 months ago
Attacktive
chore(deps-dev): Bump the dev-dependencies group across 1 directory with 6 updates

yanneves/browser.icu #288

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago 2 comments
yanneves
Bump the functional-minor-patch group with 3 updates

phy25/notrains-today #79

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
phy25
Bump the all group with 3 updates

danielosw/danielosw.github.io #209

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
danielosw
Bump @sveltejs/kit from 2.36.1 to 2.36.2

fiftyfactor/sunscreen #189

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
fiftyfactor
Bump @sveltejs/kit from 2.36.1 to 2.36.2 in /webapp

nickbrett1/ftn #2548

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
nickbrett1
chore: bump @sveltejs/kit from 2.36.1 to 2.36.2

rafal-majewski/recursive-triangles #369

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
rafal-majewski
Bump @sveltejs/kit from 2.36.1 to 2.36.2

palacms/PalaCMS #510

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
palacms
build(deps-dev): bump @sveltejs/kit from 2.36.1 to 2.36.2 in /sveltekit

wuchalejs/examples #77

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
wuchalejs
chore(deps-dev): bump @sveltejs/kit from 2.36.1 to 2.36.2

twangodev/uw-coursemap #1100

2.36.1 → 2.36.2 Patch PR
Open 3 months ago 3 comments
twangodev
chore(deps): bump the compatible group with 4 updates

phanect/guildkit #90

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago 1 comment
phanect
Bump the updates group with 2 updates

helgelol/helge.dev #543

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
helgelol
Bump the updates group in /jte-htmx-parent/frontend/app with 4 updates

BenSlabbert/vertx-dagger-app #1157

2.36.1 → 2.36.2 Patch PR
Open 3 months ago 3 comments
BenSlabbert
Bump @sveltejs/kit from 2.36.1 to 2.36.2

TeddiO/teddieu #181

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
TeddiO
chore(deps-dev): bump the dependencies group with 2 updates

josssch/mock-ui #19

2.36.1 → 2.36.2 Patch PR
Open 3 months ago 1 comment
josssch
bump @sveltejs/kit from 2.36.1 to 2.36.2

rafal-majewski/geni-prioritizer #240

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
rafal-majewski
Bump @sveltejs/kit from 2.36.1 to 2.36.2

langalex/ramit2 #26

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
langalex
chore(deps-dev): Bump the dev-dependencies group with 5 updates

yanneves/browser.icu #286

2.36.1 → 2.36.2 Patch PR
Open 3 months ago 3 comments
yanneves
Bump @sveltejs/kit from 2.36.1 to 2.36.2

Akatsuki1910/svelte-static-template #424

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
Akatsuki1910
chore: Bump @sveltejs/kit from 2.36.1 to 2.36.2

rafal-majewski/resume-builder #490

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
rafal-majewski
build(deps-dev): bump @sveltejs/kit from 2.36.1 to 2.36.2

Zlendy/runic-wormhole #67

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
Zlendy
Bump @sveltejs/kit from 2.36.1 to 2.36.2 in /cornucopia.owasp.org

OWASP/cornucopia #1598

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
OWASP
build(deps-dev): bump @sveltejs/kit from 2.36.1 to 2.36.2 in /frontend

lowlandghost/soar #27

2.36.1 → 2.36.2 Patch PR
Closed 3 months ago 1 comment
lowlandghost
Bump the updates group in /ui/app with 3 updates

BenSlabbert/vertx-dagger-iam #491

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago 1 comment
BenSlabbert
chore(deps-dev): Bump @sveltejs/kit from 2.36.1 to 2.36.2

podman-desktop/podman-desktop-catalog #700

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago
podman-desktop
ci: bump @sveltejs/kit from 2.36.1 to 2.36.2

Attacktive/witchspring-r-editor #886

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
Attacktive
build(deps): bump the fe-dependencies group in /frontend-svelte with 7 updates

fabXlabs/fabX #731

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
fabXlabs
chore(deps-dev): bump @sveltejs/kit from 2.36.1 to 2.36.2

MikevPeeren/sveltekit-typescript-tailwindcss-sass-starter #859

2.36.1 → 2.36.2 Patch PR
Merged 3 months ago 1 comment
MikevPeeren
Bump @sveltejs/kit from 2.36.1 to 2.36.2

usuyuki/portfolio_2023_spring #101

2.36.1 → 2.36.2 Patch PR
Closed 3 months ago 1 comment
usuyuki
chore(deps): bump @sveltejs/kit from 2.36.1 to 2.36.2

ivenuss/jakubh.com #122

2.36.1 → 2.36.2 Patch PR
Open 3 months ago
ivenuss
Bump the all group across 1 directory with 6 updates

danielosw/danielosw.github.io #208

2.36.0 → 2.36.1 Patch PR
Open 3 months ago
danielosw
Bump the functional-minor-patch group with 3 updates

phy25/notrains-today #78

2.36.0 → 2.36.1 Patch PR
Open 3 months ago
phy25
ci: bump @sveltejs/kit from 2.36.0 to 2.36.1

Attacktive/troubleshooter-editor-front-end-svelte #947

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago
Attacktive
Package Details
Name: @sveltejs/kit
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@sveltejs/kit
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 3
MODERATE 1
LOW 2
View All npm Advisories
Package Information
Description:

SvelteKit is the fastest way to build Svelte apps

Repository: https://github.com/sveltejs/kit
Homepage: https://svelte.dev
Latest Release: 2.21.2
6 months ago
Dependent Repos: 17,842
Dependent Packages: 3,630
Downloads: 2,265,474
Ranking: Top 0.2122% by dependent repos Top 0.2722% by downloads Top 0.0325% by dependent pkgs
PR Status
Open 2,660 (42.0%)
Merged 1,416 (22.4%)
Closed 1,752 (27.7%)
PR Types
Minor 4,183 (66.1%)
Major 273 (4.3%)
Patch 1,366 (21.6%)