CVE-2026-42567 — Svelte: ReDoS in `<svelte:element>` Tag Validation
Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelt…
Published: 2026-06-09 · CVSS: 5.9 · CVSS 4.0
Svelte is a performance oriented web framework. From version 5.51.5 to before version 5.55.7, an internal regex in the Svelte runtime can take exponential time to test in <svelte:element this={tag}></svelte:element>. This issue has been patched in version 5.55.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7