Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-27119

svelte performance oriented web framework. From 5.39.3, <=5.51.4, in certain circumstances, the server-side rendering output of an <option> element does not properly escape its content, potentially allowing HTML injection in the SSR output. Client-side rendering is not affected. This vulnerability is fixed in 5.51.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.3%
CVSS Severity
CVSS v3 Score 5.4
Products affected by CVE-2026-27119
  • Svelte » Svelte » Version: 5.39.10
    cpe:2.3:a:svelte:svelte:5.39.10
  • Svelte » Svelte » Version: 5.39.11
    cpe:2.3:a:svelte:svelte:5.39.11
  • Svelte » Svelte » Version: 5.39.12
    cpe:2.3:a:svelte:svelte:5.39.12
  • Svelte » Svelte » Version: 5.39.13
    cpe:2.3:a:svelte:svelte:5.39.13
  • Svelte » Svelte » Version: 5.39.3
    cpe:2.3:a:svelte:svelte:5.39.3
  • Svelte » Svelte » Version: 5.39.4
    cpe:2.3:a:svelte:svelte:5.39.4
  • Svelte » Svelte » Version: 5.39.5
    cpe:2.3:a:svelte:svelte:5.39.5
  • Svelte » Svelte » Version: 5.39.6
    cpe:2.3:a:svelte:svelte:5.39.6
  • Svelte » Svelte » Version: 5.39.7
    cpe:2.3:a:svelte:svelte:5.39.7
  • Svelte » Svelte » Version: 5.39.8
    cpe:2.3:a:svelte:svelte:5.39.8
  • Svelte » Svelte » Version: 5.39.9
    cpe:2.3:a:svelte:svelte:5.39.9
  • Svelte » Svelte » Version: 5.40.0
    cpe:2.3:a:svelte:svelte:5.40.0
  • Svelte » Svelte » Version: 5.40.1
    cpe:2.3:a:svelte:svelte:5.40.1
  • Svelte » Svelte » Version: 5.40.2
    cpe:2.3:a:svelte:svelte:5.40.2
  • Svelte » Svelte » Version: 5.41.0
    cpe:2.3:a:svelte:svelte:5.41.0
  • Svelte » Svelte » Version: 5.41.1
    cpe:2.3:a:svelte:svelte:5.41.1
  • Svelte » Svelte » Version: 5.41.2
    cpe:2.3:a:svelte:svelte:5.41.2
  • Svelte » Svelte » Version: 5.41.3
    cpe:2.3:a:svelte:svelte:5.41.3
  • Svelte » Svelte » Version: 5.41.4
    cpe:2.3:a:svelte:svelte:5.41.4
  • Svelte » Svelte » Version: 5.42.0
    cpe:2.3:a:svelte:svelte:5.42.0
  • Svelte » Svelte » Version: 5.42.1
    cpe:2.3:a:svelte:svelte:5.42.1
  • Svelte » Svelte » Version: 5.42.2
    cpe:2.3:a:svelte:svelte:5.42.2
  • Svelte » Svelte » Version: 5.42.3
    cpe:2.3:a:svelte:svelte:5.42.3
  • Svelte » Svelte » Version: 5.43.0
    cpe:2.3:a:svelte:svelte:5.43.0
  • Svelte » Svelte » Version: 5.43.1
    cpe:2.3:a:svelte:svelte:5.43.1
  • Svelte » Svelte » Version: 5.43.10
    cpe:2.3:a:svelte:svelte:5.43.10
  • Svelte » Svelte » Version: 5.43.11
    cpe:2.3:a:svelte:svelte:5.43.11
  • Svelte » Svelte » Version: 5.43.12
    cpe:2.3:a:svelte:svelte:5.43.12
  • Svelte » Svelte » Version: 5.43.13
    cpe:2.3:a:svelte:svelte:5.43.13
  • Svelte » Svelte » Version: 5.43.14
    cpe:2.3:a:svelte:svelte:5.43.14
  • Svelte » Svelte » Version: 5.43.15
    cpe:2.3:a:svelte:svelte:5.43.15
  • Svelte » Svelte » Version: 5.43.2
    cpe:2.3:a:svelte:svelte:5.43.2
  • Svelte » Svelte » Version: 5.43.3
    cpe:2.3:a:svelte:svelte:5.43.3
  • Svelte » Svelte » Version: 5.43.4
    cpe:2.3:a:svelte:svelte:5.43.4
  • Svelte » Svelte » Version: 5.43.5
    cpe:2.3:a:svelte:svelte:5.43.5
  • Svelte » Svelte » Version: 5.43.6
    cpe:2.3:a:svelte:svelte:5.43.6
  • Svelte » Svelte » Version: 5.43.7
    cpe:2.3:a:svelte:svelte:5.43.7
  • Svelte » Svelte » Version: 5.43.8
    cpe:2.3:a:svelte:svelte:5.43.8
  • Svelte » Svelte » Version: 5.43.9
    cpe:2.3:a:svelte:svelte:5.43.9
  • Svelte » Svelte » Version: 5.44.0
    cpe:2.3:a:svelte:svelte:5.44.0
  • Svelte » Svelte » Version: 5.44.1
    cpe:2.3:a:svelte:svelte:5.44.1
  • Svelte » Svelte » Version: 5.45.0
    cpe:2.3:a:svelte:svelte:5.45.0
  • Svelte » Svelte » Version: 5.45.1
    cpe:2.3:a:svelte:svelte:5.45.1
  • Svelte » Svelte » Version: 5.45.10
    cpe:2.3:a:svelte:svelte:5.45.10
  • Svelte » Svelte » Version: 5.45.2
    cpe:2.3:a:svelte:svelte:5.45.2
  • Svelte » Svelte » Version: 5.45.3
    cpe:2.3:a:svelte:svelte:5.45.3
  • Svelte » Svelte » Version: 5.45.4
    cpe:2.3:a:svelte:svelte:5.45.4
  • Svelte » Svelte » Version: 5.45.5
    cpe:2.3:a:svelte:svelte:5.45.5
  • Svelte » Svelte » Version: 5.45.6
    cpe:2.3:a:svelte:svelte:5.45.6
  • Svelte » Svelte » Version: 5.45.7
    cpe:2.3:a:svelte:svelte:5.45.7
  • Svelte » Svelte » Version: 5.45.8
    cpe:2.3:a:svelte:svelte:5.45.8
  • Svelte » Svelte » Version: 5.45.9
    cpe:2.3:a:svelte:svelte:5.45.9
  • Svelte » Svelte » Version: 5.46.0
    cpe:2.3:a:svelte:svelte:5.46.0
  • Svelte » Svelte » Version: 5.46.1
    cpe:2.3:a:svelte:svelte:5.46.1
  • Svelte » Svelte » Version: 5.46.4
    cpe:2.3:a:svelte:svelte:5.46.4
  • Svelte » Svelte » Version: 5.47.0
    cpe:2.3:a:svelte:svelte:5.47.0
  • Svelte » Svelte » Version: 5.47.1
    cpe:2.3:a:svelte:svelte:5.47.1
  • Svelte » Svelte » Version: 5.48.0
    cpe:2.3:a:svelte:svelte:5.48.0
  • Svelte » Svelte » Version: 5.48.1
    cpe:2.3:a:svelte:svelte:5.48.1
  • Svelte » Svelte » Version: 5.48.2
    cpe:2.3:a:svelte:svelte:5.48.2
  • Svelte » Svelte » Version: 5.48.3
    cpe:2.3:a:svelte:svelte:5.48.3
  • Svelte » Svelte » Version: 5.48.4
    cpe:2.3:a:svelte:svelte:5.48.4
  • Svelte » Svelte » Version: 5.48.5
    cpe:2.3:a:svelte:svelte:5.48.5
  • Svelte » Svelte » Version: 5.49.0
    cpe:2.3:a:svelte:svelte:5.49.0
  • Svelte » Svelte » Version: 5.49.1
    cpe:2.3:a:svelte:svelte:5.49.1
  • Svelte » Svelte » Version: 5.49.2
    cpe:2.3:a:svelte:svelte:5.49.2
  • Svelte » Svelte » Version: 5.50.0
    cpe:2.3:a:svelte:svelte:5.50.0
  • Svelte » Svelte » Version: 5.50.1
    cpe:2.3:a:svelte:svelte:5.50.1
  • Svelte » Svelte » Version: 5.50.2
    cpe:2.3:a:svelte:svelte:5.50.2
  • Svelte » Svelte » Version: 5.50.3
    cpe:2.3:a:svelte:svelte:5.50.3
  • Svelte » Svelte » Version: 5.51.0
    cpe:2.3:a:svelte:svelte:5.51.0
  • Svelte » Svelte » Version: 5.51.1
    cpe:2.3:a:svelte:svelte:5.51.1
  • Svelte » Svelte » Version: 5.51.2
    cpe:2.3:a:svelte:svelte:5.51.2
  • Svelte » Svelte » Version: 5.51.3
    cpe:2.3:a:svelte:svelte:5.51.3
  • Svelte » Svelte » Version: 5.51.4
    cpe:2.3:a:svelte:svelte:5.51.4


Contact Us

Shodan ® - All rights reserved