Repository navigation
[GHSA-h7h7-mm68-gmrc] Svelte affected by XSS in SSR <option> element - #11260
aungzayyanaing wants to merge 1 commit into
Conversation
|
Hi there @elliott-with-the-longest-name-on-github! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository. This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory |
There was a problem hiding this comment.
🟢 Approval recommended
No active review issues are reported, and the advisory metadata now includes the official Svelte 5.51.5 release reference and updated timestamp.
No open issues 🎉
What changed in this PR
Updates the Svelte security advisory metadata to reference the official Svelte 5.51.5 release that fixes the SSR <option> XSS vulnerability.
Changes:
- Adds the official Svelte 5.51.5 release URL to the advisory references.
- Updates the advisory modification timestamp.
| File | Description |
|---|---|
| advisories/github-reviewed/2026/02/GHSA-h7h7-mm68-gmrc/GHSA-h7h7-mm68-gmrc.json | Adds the official Svelte 5.51.5 release reference and updates the advisory metadata. |
Review effort: Lite (dynamic)
|
This information is already included in the affected packages. |
Updates
Comments
Add the official Svelte 5.51.5 release link. That release fixes the SSR escaping issue described in this advisory (CVE-2026-27119).