Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@sveltejs/kit

Ecosystem:
npm
Package URL:
pkg:npm/@sveltejs/kit
Total PRs:
6,339 Dependabot PRs
Latest PR:
about 1 hour ago
Unique Repositories:
1,079 repositories
Unique Repos (30 days):
123 repositories
Security Advisories
SvelteKit framework has Insufficient CSRF protection for CORS requests
GHSA-gv7g-x59x-wf8f CVE-2023-29008 HIGH published over 2 years ago • updated 1 day ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
Sending a GET or HEAD request with a body crashes SvelteKit
GHSA-g5m6-hxpp-fc49 CVE-2024-23641 HIGH published almost 2 years ago • updated 2 days ago
### Summary In SvelteKit 2 sending a GET request with a body eg `{}` to a SvelteKit app in preview or with `adapter-node` throws `Request with GET/...
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
GHSA-6q87-84jw-cjhp CVE-2025-32388 MODERATE published 7 months ago • updated 4 days ago
### Summary Unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of `event.url.searchParams` i...
SvelteKit vulnerable to Cross-Site Request Forgery
GHSA-5p75-vc5g-8rv2 CVE-2023-29003 HIGH published over 2 years ago • updated 3 days ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
@sveltejs/kit vulnerable to XSS on dev mode 404 page
GHSA-rjjv-87mx-6x3h CVE-2024-53261 LOW published 12 months ago • updated 4 days ago
### Summary "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may res...
View all 6 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump the functional-minor-patch group with 3 updates

phy25/notrains-today #78

2.36.0 → 2.36.1 Patch PR
Open 3 months ago
phy25
ci: bump @sveltejs/kit from 2.36.0 to 2.36.1

Attacktive/troubleshooter-editor-front-end-svelte #947

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago
Attacktive
build(deps-dev): bump @sveltejs/kit from 2.36.0 to 2.36.1 in /frontend-svelte in the fe-dependencies group

fabXlabs/fabX #729

2.36.0 → 2.36.1 Patch PR
Open 3 months ago
fabXlabs
bump @sveltejs/kit from 2.36.0 to 2.36.1

rafal-majewski/recursive-triangles #366

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago
rafal-majewski
chore(deps-dev): bump @sveltejs/kit from 2.36.0 to 2.36.1

MikevPeeren/sveltekit-typescript-tailwindcss-sass-starter #855

2.36.0 → 2.36.1 Patch PR
Open 3 months ago 1 comment
MikevPeeren
Bump @sveltejs/kit from 2.36.0 to 2.36.1

fiftyfactor/sunscreen #186

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago
fiftyfactor
Bump the all group with 2 updates

danielosw/danielosw.github.io #207

2.36.0 → 2.36.1 Patch PR
Open 3 months ago 1 comment
danielosw
Bump @sveltejs/kit from 2.36.0 to 2.36.1 in /webapp

nickbrett1/ftn #2521

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago
nickbrett1
Bump the sveltekit group with 2 updates

poad/sveltekit-minimal-example #405

2.36.0 → 2.36.1 Patch PR
Merged 3 months ago 1 comment
poad
chore(deps-dev): bump @sveltejs/kit from 2.36.0 to 2.36.1

231tr0n/231tr0n.github.io #232

2.36.0 → 2.36.1 Patch PR
Open 3 months ago
231tr0n
build(deps): bump undici and @sveltejs/kit in /ui

ebarped/sego #15

1.30.3 → 1.30.4 Patch PR
Open 3 months ago 1 comment
ebarped
build(deps-dev): Bump @sveltejs/kit from 2.33.0 to 2.33.1

AtCoder-NoviSteps/AtCoderNoviSteps #2488

2.33.0 → 2.33.1 Patch PR
Closed 3 months ago 3 comments
AtCoder-NoviSteps
Bump the svelte group with 2 updates

ttoino/svelte-m3c #96

2.31.0 → 2.31.1 Patch PR
Open 3 months ago
ttoino
chore(deps-dev): bump @sveltejs/kit from 2.31.0 to 2.31.1

afspeirs/entity-me #70

2.31.0 → 2.31.1 Patch PR
Closed 3 months ago 2 comments
afspeirs
chore(deps)(deps): bump the minor-patch group across 1 directory with 4 updates

rudi-q/leed_pdf_viewer #30

2.31.0 → 2.31.1 Patch PR
Closed 3 months ago 6 comments
rudi-q
chore(deps-dev): bump @sveltejs/kit from 2.31.0 to 2.31.1

afspeirs/speirs.dev #98

2.31.0 → 2.31.1 Patch PR
Open 3 months ago
afspeirs
chore(deps)(deps): bump the minor-patch group with 3 updates

rudi-q/leed_pdf_viewer #25

2.31.0 → 2.31.1 Patch PR
Closed 3 months ago 6 comments
rudi-q
build(deps-dev): Bump @sveltejs/kit from 2.31.0 to 2.31.1

AtCoder-NoviSteps/AtCoderNoviSteps #2470

2.31.0 → 2.31.1 Patch PR
Merged 3 months ago 1 comment
AtCoder-NoviSteps
Bump @sveltejs/kit from 2.30.0 to 2.30.1

sockmaster27/svader #273

2.30.0 → 2.30.1 Patch PR
Merged 3 months ago
sockmaster27
chore(deps-dev): Bump the dev-dependencies group with 5 updates

yanneves/browser.icu #278

2.30.0 → 2.30.1 Patch PR
Merged 3 months ago 1 comment
yanneves
build(deps-dev): bump @sveltejs/kit from 2.30.0 to 2.30.1

jansinger/tss2012 #1512

2.30.0 → 2.30.1 Patch PR
Open 3 months ago 3 comments
jansinger
build(deps-dev): Bump @sveltejs/kit from 2.30.0 to 2.30.1

AtCoder-NoviSteps/AtCoderNoviSteps #2461

2.30.0 → 2.30.1 Patch PR
Merged 3 months ago 1 comment
AtCoder-NoviSteps
Bump @sveltejs/kit from 2.27.0 to 2.27.3

tankpipe/tankpipe-app #341

2.27.0 → 2.27.3 Patch PR
Open 3 months ago 1 comment
tankpipe
chore(deps-dev): bump @sveltejs/kit from 2.27.0 to 2.27.3

wiscaksono/site #180

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
wiscaksono
chore(deps-dev): bump @sveltejs/kit from 2.27.0 to 2.27.3

Knoblauchpilze/frontend-toolkit #270

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
Knoblauchpilze
build(deps): bump the npm-updates group with 15 updates

Eurora-Labs/eurora #231

2.27.0 → 2.27.3 Patch PR
Open 3 months ago 1 comment
eurora-labs
Bump @sveltejs/kit from 2.27.0 to 2.27.3

magemonkeystudio/fabled #1359

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
magemonkeystudio
chore(deps): bump the all-dependencies group with 9 updates

Profiidev/positron_components #101

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
Profiidev
build(deps): bump the all-dependencies group with 6 updates

Profiidev/higgs #6

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
Profiidev
Bump the svelte group with 5 updates

ttoino/website #72

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
ttoino
Bump @sveltejs/kit from 2.27.0 to 2.27.3

CollierCZ/czechtheater #1015

2.27.0 → 2.27.3 Patch PR
Closed 3 months ago 1 comment
CollierCZ
Bump @sveltejs/kit from 2.27.0 to 2.27.3

mgrsskls/convert #404

2.27.0 → 2.27.3 Patch PR
Closed 3 months ago 1 comment
mgrsskls
chore(deps): bump the dependencies group with 18 updates

Robin-w151/orfarchiv-ui #118

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
Robin-w151
build(deps-dev): Bump @sveltejs/kit from 2.27.0 to 2.27.3

Knoblauchpilze/website-lobby #247

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
Knoblauchpilze
build(deps): bump the minor group with 5 updates

nick-ng/jalendar #133

2.27.0 → 2.27.3 Patch PR
Closed 3 months ago 1 comment
nick-ng
Bump @sveltejs/kit from 2.27.0 to 2.27.3 in /frontend

AdbAutoPlayer/AdbAutoPlayer #281

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
AdbAutoPlayer
Bump the minor-patches group with 9 updates

VaiTon/almaaule #88

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago 1 comment
VaiTon
Bump @sveltejs/kit from 2.27.1 to 2.27.3

BlazeFace/blzai #330

2.27.1 → 2.27.3 Patch PR
Merged 3 months ago
BlazeFace
Bump @sveltejs/kit from 2.27.0 to 2.27.3

fsargent/approval-vote #139

2.27.0 → 2.27.3 Patch PR
Closed 3 months ago 1 comment
fsargent
Bump @sveltejs/kit from 2.27.0 to 2.27.3

j-be/stonky #442

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
j-be
chore(deps-dev): bump the dev-dependencies-minor-patch group across 1 directory with 28 updates

unnoq/orpc #861

2.27.1 → 2.27.3 Patch PR
Merged 3 months ago 4 comments
unnoq
build(deps-dev): Bump @sveltejs/kit from 2.27.0 to 2.27.3

Knoblauchpilze/user-dashboard #251

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
Knoblauchpilze
Bump @sveltejs/kit from 2.27.2 to 2.27.3 in /app

HarshNarayanJha/3DS-ActivityLog #9

2.27.2 → 2.27.3 Patch PR
Open 3 months ago
HarshNarayanJha
Bump the all group with 6 updates

hamvocke/root-loops #99

2.27.0 → 2.27.3 Patch PR
Open 3 months ago 2 comments
hamvocke
build(deps-dev): bump @sveltejs/kit from 2.27.0 to 2.27.3 in /frontend

r-Techsupport/hyde #559

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
r-Techsupport
chore(deps): bump the all-dependencies group across 1 directory with 7 updates

zfixler/naparc #49

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
zfixler
Bump the minor-patch-updates group with 16 updates

Steven-Harris/githelm #75

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
Steven-Harris
deps: bump the all-dev-deps group with 6 updates

terraputix/meteo-fly #25

2.27.0 → 2.27.3 Patch PR
Open 3 months ago
terraputix
chore(deps-dev): bump the dev-dependencies-minor-patch group with 29 updates

unnoq/orpc #858

2.27.1 → 2.27.3 Patch PR
Open 3 months ago
unnoq
Bump @sveltejs/kit from 2.27.0 to 2.27.3

codebam/seanbehan.ca #739

2.27.0 → 2.27.3 Patch PR
Merged 3 months ago
codebam
Package Details
Name: @sveltejs/kit
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@sveltejs/kit
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 3
MODERATE 1
LOW 2
View All npm Advisories
Package Information
Description:

SvelteKit is the fastest way to build Svelte apps

Repository: https://github.com/sveltejs/kit
Homepage: https://svelte.dev
Latest Release: 2.21.2
6 months ago
Dependent Repos: 17,842
Dependent Packages: 3,630
Downloads: 2,265,474
Ranking: Top 0.2122% by dependent repos Top 0.2722% by downloads Top 0.0325% by dependent pkgs
PR Status
Open 2,660 (42.0%)
Merged 1,416 (22.4%)
Closed 1,752 (27.7%)
PR Types
Minor 4,183 (66.1%)
Major 273 (4.3%)
Patch 1,366 (21.6%)