Skip to content

Commit d7dc8e4

Browse files
authored
Fix vulnerable Svelte version range in blog post (#1733)
1 parent afc75c7 commit d7dc8e4

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

apps/svelte.dev/content/blog/2026-01-15-cves-affecting-the-svelte-ecosystem.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -89,7 +89,7 @@ Full reports are available in the published security advisories, but we’ve inc
8989
- Packages affected:
9090
- `svelte`
9191
- You’re vulnerable if:
92-
- You’re using `svelte` versions `2.46.0` through `2.46.3`, and
92+
- You’re using `svelte` versions `5.46.0` through `5.46.3`, and
9393
- You’re using [`hydratable`](https://svelte.dev/docs/svelte/hydratable), and you’re passing unsanitized, user-controlled strings in as keys
9494
- Effects:
9595
- Your users are vulnerable to XSS if an attacker can manage to get a controlled key into `hydratable` that is then returned to another user

0 commit comments

Comments
 (0)