Vulnerability in Sveltejs Kit
CVE-2026-27118
SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte. Versions of @sveltejs/adapter-vercel prior to 6.3.2 are vulnerable to cache poisoning. An internal query parameter intended for Incremental S…
EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.
Affected products
- Sveltejs Kit — versions < 6.3.2
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)