CVE-2026-128117 | SvelteJS SvelteKit up to 2.70.3/3.1.0 Reroute Hook reroute input validation

November 13, 2026 Yanac

A vulnerability marked as problematic has been reported in SvelteJS SvelteKit up to 2.70.3/3.1.0. This issue affects the function reroute of the component Reroute Hook. This manipulation causes improper input validation.

This vulnerability is tracked as CVE-2026-128117. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More