UpHeron
All vulnerabilities

Servers and applications

GHSA-m9j8-jcmv-hp69

Build-time server-only module import guard could fail, resulting in server secrets being statically replaced in client bundle

Severity
High 7.5
Published
29 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.1.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SvelteKitServers and applications · github:sveltejs/kit
  • From 3.0.0 before 3.1.1

References