An open index of dependabot pull requests across open source projects.

@sveltejs/kit

Ecosystem:
npm
Package URL:
pkg:npm/@sveltejs/kit
Total PRs:
8,005 Dependabot PRs
Latest PR:
about 21 hours ago
Unique Repositories:
1,733 repositories
Unique Repos (30 days):
131 repositories
Security Advisories
@sveltejs/kit vulnerable to XSS on dev mode 404 page
GHSA-rjjv-87mx-6x3h CVE-2024-53261 LOW published over 1 year ago • updated 5 days ago
### Summary "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may res...
@sveltejs/adapter-node has a BODY_SIZE_LIMIT bypass
GHSA-2crg-3p73-43xp CVE-2026-40073 HIGH published about 2 months ago • updated 3 days ago
Under certain circumstances, requests could bypass the `BODY_SIZE_LIMIT` on SvelteKit applications running with `adapter-node`. This bypass does no...
@sveltejs/kit: `query.batch` cross-talk
GHSA-hgv7-v322-mmgr MODERATE published 12 days ago • updated 9 days ago
`query.batch()` could, under very rare and specific timings, cause concurrent requests from different users to merge and resolve under single reque...
@sveltejs/kit: Unvalidated redirect in handle hook causes Denial-of-Service
GHSA-3f6h-2hrp-w5wx CVE-2026-40074 MODERATE published about 2 months ago • updated 9 days ago
`redirect`, when called from inside the `handle` server hook with a location parameter containing characters that are invalid in a HTTP header, wil...
SvelteKit is vulnerable to denial of service and possible SSRF when using prerendering
GHSA-j62c-4x62-9r35 CVE-2025-67647 HIGH published 5 months ago • updated 1 day ago
### Summary Versions of SvelteKit are vulnerable to a server side request forgery (SSRF) and denial of service (DoS) under certain conditions. ##...
Recent PRs (filtered by: Patch PRs )
Package Details
Name: @sveltejs/kit
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@sveltejs/kit
JSON API: View JSON
Security Advisories

14

Active advisories
HIGH 6
MODERATE 5
LOW 3
View All npm Advisories
Package Information
Description:

SvelteKit is the fastest way to build Svelte apps

Repository: https://github.com/sveltejs/kit
Homepage: https://svelte.dev
Latest Release: 2.21.2
12 months ago
Dependent Repos: 17,842
Dependent Packages: 3,630
Downloads: 2,265,474
Ranking: Top 0.2122% by dependent repos Top 0.2722% by downloads Top 0.0325% by dependent pkgs
PR Status
Open 3,429 (42.8%)
Merged 1,429 (17.9%)
Closed 2,644 (33.0%)
PR Types
Major 334 (4.2%)
Minor 5,423 (67.7%)
Patch 1,739 (21.7%)