Vulnerabilities / Svelte library with known vulnerabilities

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
↓

Severity

Low

CWE Name

Svelte library with known vulnerabilities

CWE ID

CWE-1035

CVSS Score

4.8

Compliance

OWASP TOP10 -> A5, A6
PCI-DSS -> 6.2
ISO27001 -> A.8.9

Svelte library with known vulnerabilities

The application uses an outdated version of the Svelte library, which has known vulnerabilities.

How to fix

generic

To fix this issue, you just need to update Svelte to the latest version available on their website.
Do not forget to update all the Svelte files you have on the server.