All vulnerabilities

Servers and applications

CVE-2023-29003

Insufficient Cross-Site Request Forgery Protection

Severity
Critical 9.3
Published
4 Apr 2023
Last changed
21 Jun 2023
Added to UpHeron
3 Nov 2026
Fixed in
1.15.1
Also known as
GHSA-5p75-vc5g-8rv2
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SvelteKitServers and applications · github:sveltejs/kit
  • Every version before 1.15.1

References