CVE-2026-128116 | sveltejs SvelteKit up to 2.70.3/3.1.0 Route Resolution cross site scripting

November 13, 2026 Yanac

A vulnerability labeled as problematic has been found in sveltejs SvelteKit up to 2.70.3/3.1.0. This vulnerability affects unknown code of the component Route Resolution. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-128116. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More