CVE-2021-29261

概要

参考情報

• sveltejs/language-tools commit 5d7bf1f · Patch
• sveltejs/language-tools release · Third Party Advisory
• sveltejs/language-tools release extensions-104.8.0 · Release Notes
• marketplace.visualstudio.com/items · Product
• vuln.ryotak.me/advisories/3 · Third Party Advisory

svelte のその他の脆弱性

• CVE-2026-42599中 6.1Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, …
• CVE-2026-42573中 6.1Svelte is a performance oriented web framework. Prior to version 5.55.7, Svelte was vulnerable to DOM clobbering of its internal framework s…
• CVE-2026-42567高 7.5Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can ta…
• CVE-2026-27902中 5.4Svelte performance oriented web framework. Prior to version 5.53.5, errors from `transformError` were not correctly escaped prior to being e…
• CVE-2026-27901中 6.1Svelte performance oriented web framework. Prior to version 5.53.5, the contents of `bind:innerText` and `bind:textContent` on `contentedita…