NodeJS/svelte/3.2.2

Cybernetically enhanced web apps

https://www.npmjs.com/package/svelte
MIT

2 Security Vulnerabilities

Svelte has a potential mXSS vulnerability due to improper HTML escaping

Published date: 2024-08-30T16:49:10Z
CVE: CVE-2024-45047
Links:

Summary

A potential XSS vulnerability exists in Svelte for versions prior to 4.2.19.

Details

Svelte improperly escapes HTML on server-side rendering. It converts strings according to the following rules:

  • If the string is an attribute value:
    • " -> "
    • & -> &
    • Other characters -> No conversion
  • Otherwise:
    • < -> &lt;
    • & -> &amp;
    • Other characters -> No conversion

The assumption is that attributes will always stay as such, but in some situation the final DOM tree rendered on browsers is different from what Svelte expects on server-side rendering. This may be leveraged to perform XSS attacks. More specifically, this can occur when injecting malicious content into an attribute within a <noscript> tag.

PoC

A vulnerable page (+page.svelte): ```html 


If a user accesses the following URL,

http://localhost:4173/?href= `` then,alert(123)` will be executed.

Impact

XSS, when using an attribute within a noscript tag

Affected versions: ["0.2.0", "0.2.2", "1.0.0", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.1.1", "1.2.1", "1.2.2", "1.2.3", "1.2.4", "1.3.0", "1.4.0", "1.5.0", "1.6.2", "1.6.3", "1.6.5", "1.6.6", "1.6.11", "1.7.1", "1.10.2", "1.11.0", "1.11.1", "1.11.3", "1.12.1", "1.13.0", "1.13.2", "1.13.4", "1.13.6", "1.14.0", "1.14.1", "1.15.0", "1.18.0", "1.18.1", "1.18.2", "1.19.1", "1.20.1", "1.20.2", "1.21.0", "1.22.0", "1.22.2", "1.22.5", "1.23.0", "1.23.1", "1.23.2", "1.23.4", "1.24.0", "1.26.0", "1.27.0", "1.29.1", "1.29.2", "1.30.0", "1.31.0", "1.32.0", "1.33.0", "1.34.0", "1.35.0", "1.36.0", "1.37.0", "1.39.2", "1.39.3", "1.39.4", "1.40.1", "1.40.2", "1.41.3", "1.42.0", "1.43.0", "1.43.1", "1.44.1", "1.45.0", "1.47.1", "1.49.1", "1.49.2", "1.49.3", "1.50.0", "1.50.1", "1.51.0", "1.51.1", "1.53.0", "1.54.0", "1.54.1", "1.54.2", "1.56.1", "1.56.3", "1.56.4", "1.57.0", "1.57.1", "1.57.2", "1.58.1", "1.58.3", "1.58.4", "1.58.5", "1.60.1", "1.61.0", "1.63.0", "2.1.0", "2.3.0", "2.4.0", "2.4.3", "2.4.4", "2.5.0", "2.6.0", "2.6.1", "2.6.4", "2.6.5", "2.8.0", "2.8.1", "2.9.1", "2.9.2", "2.9.3", "2.9.4", "2.9.6", "2.9.9", "2.12.1", "2.13.0", "2.13.1", "2.13.2", "0.0.1", "0.0.2", "0.1.0", "0.1.1", "0.2.1", "0.3.0", "1.0.1", "1.0.2", "1.0.7", "1.1.0", "1.1.2", "1.1.3", "1.2.0", "1.2.5", "1.3.1", "1.6.0", "1.6.1", "1.6.4", "1.6.7", "1.6.8", "1.6.9", "1.6.10", "1.7.0", "1.8.0", "1.8.1", "1.9.0", "1.9.1", "1.10.0", "1.10.1", "1.10.3", "1.11.2", "1.11.4", "1.12.0", "1.13.1", "1.13.3", "1.13.5", "1.13.7", "1.15.1", "1.16.0", "1.17.0", "1.17.1", "1.17.2", "1.19.0", "1.20.0", "1.22.1", "1.22.3", "1.22.4", "1.23.3", "1.25.0", "1.25.1", "1.26.1", "1.26.2", "1.28.0", "1.28.1", "1.29.0", "1.29.3", "1.38.0", "1.39.0", "1.39.1", "1.40.0", "1.41.0", "1.41.1", "1.41.2", "1.41.4", "1.42.1", "1.44.0", "1.44.2", "1.46.0", "1.46.1", "1.47.0", "1.47.2", "1.48.0", "1.49.0", "1.52.0", "1.55.0", "1.55.1", "1.56.0", "1.56.2", "1.57.3", "1.57.4", "1.58.0", "1.58.2", "1.59.0", "1.60.0", "1.60.2", "1.60.3", "1.62.0", "1.63.1", "1.64.0", "1.64.1", "2.0.0", "2.1.1", "2.2.0", "2.4.1", "2.4.2", "2.5.1", "2.6.2", "2.6.3", "2.6.6", "2.7.0", "2.7.1", "2.7.2", "2.9.0", "2.9.5", "2.9.7", "2.9.8", "2.9.10", "2.9.11", "2.10.0", "2.10.1", "2.11.0", "2.12.0", "2.13.4", "2.13.5", "2.14.0", "2.14.1", "3.0.0-alpha1", "3.0.0-alpha3", "3.0.0-alpha6", "3.0.0-alpha10", "3.0.0-alpha14", "3.0.0-alpha16", "3.0.0-alpha18", "3.0.0-alpha19", "3.0.0-alpha21", "3.0.0-alpha22", "3.0.0-alpha23", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0-beta.5", "3.0.0-beta.11", "3.0.0-beta.12", "3.0.0-beta.17", "3.0.0-beta.22", "3.0.0-beta.25", "3.0.0-beta.26", "3.0.1", "3.3.0", "3.4.0", "3.4.3", "3.6.0", "3.6.4", "3.6.6", "3.6.7", "3.6.8", "3.6.9", "3.8.0", "3.9.1", "3.9.2", "3.10.1", "3.11.0", "3.12.1", "3.13.0-alpha.1", "3.13.0-alpha.2", "3.13.0", "3.16.0", "3.16.1", "3.16.2", "3.16.4", "3.16.5", "3.16.6", "3.16.7", "3.17.1", "3.17.2", "3.17.3", "3.18.0", "3.18.1", "3.18.2", "3.20.1", "3.21.0", "3.22.1", "3.23.1", "3.28.0", "3.29.0", "3.29.1", "3.29.2", "3.29.3", "2.13.3", "2.14.2", "2.14.3", "2.15.0", "2.15.1", "2.15.2", "2.15.3", "3.0.0-alpha2", "2.16.0", "3.0.0-alpha4", "3.0.0-alpha5", "3.0.0-alpha7", "3.0.0-alpha8", "3.0.0-alpha9", "3.0.0-alpha11", "3.0.0-alpha12", "3.0.0-alpha13", "3.0.0-alpha15", "3.0.0-alpha17", "3.0.0-alpha20", "3.0.0-alpha24", "3.0.0-alpha25", "3.0.0-alpha26", "3.0.0-alpha27", "3.0.0-beta.2", "2.16.1", "3.0.0-beta.4", "3.0.0-beta.6", "3.0.0-beta.7", "3.0.0-beta.8", "3.0.0-beta.9", "3.0.0-beta.10", "3.0.0-beta.13", "3.0.0-beta.14", "3.0.0-beta.15", "3.0.0-beta.16", "3.0.0-beta.18", "3.0.0-beta.19", "3.0.0-beta.20", "3.0.0-beta.21", "3.0.0-beta.23", "3.0.0-beta.27", "3.0.0-beta.28", "3.0.0", "3.1.0", "3.2.0", "3.2.1", "3.2.2", "3.4.1", "3.4.2", "3.4.4", "3.5.0", "3.5.1", "3.5.2", "3.5.3", "3.5.4", "3.6.1", "3.6.2", "3.6.3", "3.6.5", "3.6.10", "3.6.11", "3.7.0", "3.7.1", "3.8.1", "3.9.0", "3.10.0", "3.12.0", "3.13.0-alpha.0", "3.14.0", "3.14.1", "3.15.0", "3.16.3", "3.17.0", "3.19.0", "3.19.1", "3.19.2", "3.20.0", "3.22.0", "3.22.2", "3.22.3", "3.23.0", "3.23.2", "3.24.0", "3.24.1", "3.25.0", "3.25.1", "3.26.0", "3.27.0", "3.29.4", "3.29.5", "3.29.6", "3.29.7", "3.30.0", "3.30.1", "3.31.0", "3.31.1", "3.31.2", "3.32.0", "3.32.1", "3.32.2", "3.32.3", "3.34.0", "3.33.0", "3.35.0", "3.36.0", "3.37.0", "3.38.0", "3.38.1", "3.38.2", "3.38.3", "3.39.0", "3.40.0", "3.40.1", "3.40.2", "3.40.3", "3.41.0", "3.42.1", "3.42.0", "3.42.2", "3.42.3", "3.42.4", "3.42.5", "3.42.6", "3.43.0", "3.43.1", "3.43.2", "3.44.0", "3.44.1", "3.44.2", "3.44.3", "3.45.0", "3.46.0", "3.46.1", "3.46.2", "3.46.3", "3.46.4", "3.46.5", "3.46.6", "3.47.0", "3.48.0", "3.49.0", "3.50.0", "3.50.1", "3.51.0", "3.52.0", "3.53.0", "3.53.1", "3.54.0", "3.55.0", "3.55.1", "3.56.0", "3.57.0", "3.58.0", "3.59.0", "3.59.1", "4.0.0-next.0", "4.0.0-next.1", "4.0.0-next.2", "3.59.2", "4.0.0-next.3", "4.0.0", "4.0.1", "4.0.2", "4.0.3", "4.0.4", "4.0.5", "4.1.0", "4.1.1", "4.1.2", "4.2.0", "4.2.1", "4.2.2", "4.2.3", "4.2.4", "4.2.5", "4.2.6", "4.2.7", "4.2.8", "4.2.9", "4.2.10", "4.2.11", "4.2.12", "4.2.13", "4.2.14", "4.2.15", "4.2.16", "4.2.17", "4.2.18"]
Secure versions: [4.2.19, 4.2.20, 5.0.0, 5.0.0-next.1, 5.0.0-next.10, 5.0.0-next.100, 5.0.0-next.101, 5.0.0-next.102, 5.0.0-next.103, 5.0.0-next.104, 5.0.0-next.105, 5.0.0-next.106, 5.0.0-next.107, 5.0.0-next.108, 5.0.0-next.109, 5.0.0-next.11, 5.0.0-next.110, 5.0.0-next.111, 5.0.0-next.112, 5.0.0-next.113, 5.0.0-next.114, 5.0.0-next.115, 5.0.0-next.116, 5.0.0-next.117, 5.0.0-next.118, 5.0.0-next.119, 5.0.0-next.12, 5.0.0-next.120, 5.0.0-next.121, 5.0.0-next.123, 5.0.0-next.125, 5.0.0-next.126, 5.0.0-next.127, 5.0.0-next.128, 5.0.0-next.129, 5.0.0-next.13, 5.0.0-next.130, 5.0.0-next.131, 5.0.0-next.132, 5.0.0-next.133, 5.0.0-next.134, 5.0.0-next.135, 5.0.0-next.136, 5.0.0-next.137, 5.0.0-next.138, 5.0.0-next.139, 5.0.0-next.14, 5.0.0-next.140, 5.0.0-next.141, 5.0.0-next.142, 5.0.0-next.143, 5.0.0-next.144, 5.0.0-next.147, 5.0.0-next.148, 5.0.0-next.149, 5.0.0-next.15, 5.0.0-next.150, 5.0.0-next.151, 5.0.0-next.152, 5.0.0-next.153, 5.0.0-next.154, 5.0.0-next.155, 5.0.0-next.157, 5.0.0-next.158, 5.0.0-next.159, 5.0.0-next.16, 5.0.0-next.160, 5.0.0-next.162, 5.0.0-next.163, 5.0.0-next.164, 5.0.0-next.165, 5.0.0-next.166, 5.0.0-next.167, 5.0.0-next.168, 5.0.0-next.169, 5.0.0-next.17, 5.0.0-next.170, 5.0.0-next.171, 5.0.0-next.172, 5.0.0-next.173, 5.0.0-next.174, 5.0.0-next.175, 5.0.0-next.176, 5.0.0-next.177, 5.0.0-next.178, 5.0.0-next.179, 5.0.0-next.18, 5.0.0-next.180, 5.0.0-next.181, 5.0.0-next.182, 5.0.0-next.183, 5.0.0-next.184, 5.0.0-next.185, 5.0.0-next.186, 5.0.0-next.187, 5.0.0-next.188, 5.0.0-next.189, 5.0.0-next.19, 5.0.0-next.190, 5.0.0-next.191, 5.0.0-next.192, 5.0.0-next.193, 5.0.0-next.194, 5.0.0-next.195, 5.0.0-next.196, 5.0.0-next.197, 5.0.0-next.198, 5.0.0-next.199, 5.0.0-next.2, 5.0.0-next.20, 5.0.0-next.200, 5.0.0-next.201, 5.0.0-next.202, 5.0.0-next.203, 5.0.0-next.204, 5.0.0-next.205, 5.0.0-next.206, 5.0.0-next.207, 5.0.0-next.208, 5.0.0-next.21, 5.0.0-next.210, 5.0.0-next.211, 5.0.0-next.212, 5.0.0-next.213, 5.0.0-next.214, 5.0.0-next.215, 5.0.0-next.216, 5.0.0-next.217, 5.0.0-next.218, 5.0.0-next.219, 5.0.0-next.22, 5.0.0-next.220, 5.0.0-next.221, 5.0.0-next.222, 5.0.0-next.223, 5.0.0-next.224, 5.0.0-next.225, 5.0.0-next.226, 5.0.0-next.227, 5.0.0-next.228, 5.0.0-next.229, 5.0.0-next.23, 5.0.0-next.230, 5.0.0-next.231, 5.0.0-next.232, 5.0.0-next.233, 5.0.0-next.234, 5.0.0-next.235, 5.0.0-next.236, 5.0.0-next.237, 5.0.0-next.238, 5.0.0-next.239, 5.0.0-next.24, 5.0.0-next.240, 5.0.0-next.241, 5.0.0-next.242, 5.0.0-next.243, 5.0.0-next.244, 5.0.0-next.245, 5.0.0-next.246, 5.0.0-next.247, 5.0.0-next.248, 5.0.0-next.249, 5.0.0-next.25, 5.0.0-next.250, 5.0.0-next.251, 5.0.0-next.252, 5.0.0-next.253, 5.0.0-next.254, 5.0.0-next.255, 5.0.0-next.256, 5.0.0-next.257, 5.0.0-next.258, 5.0.0-next.259, 5.0.0-next.26, 5.0.0-next.260, 5.0.0-next.262, 5.0.0-next.263, 5.0.0-next.264, 5.0.0-next.265, 5.0.0-next.266, 5.0.0-next.267, 5.0.0-next.268, 5.0.0-next.269, 5.0.0-next.27, 5.0.0-next.270, 5.0.0-next.271, 5.0.0-next.272, 5.0.0-next.28, 5.0.0-next.29, 5.0.0-next.3, 5.0.0-next.30, 5.0.0-next.31, 5.0.0-next.32, 5.0.0-next.33, 5.0.0-next.34, 5.0.0-next.35, 5.0.0-next.36, 5.0.0-next.37, 5.0.0-next.38, 5.0.0-next.39, 5.0.0-next.4, 5.0.0-next.40, 5.0.0-next.41, 5.0.0-next.42, 5.0.0-next.43, 5.0.0-next.44, 5.0.0-next.45, 5.0.0-next.46, 5.0.0-next.47, 5.0.0-next.48, 5.0.0-next.49, 5.0.0-next.5, 5.0.0-next.50, 5.0.0-next.51, 5.0.0-next.52, 5.0.0-next.53, 5.0.0-next.54, 5.0.0-next.55, 5.0.0-next.56, 5.0.0-next.57, 5.0.0-next.58, 5.0.0-next.59, 5.0.0-next.6, 5.0.0-next.60, 5.0.0-next.61, 5.0.0-next.62, 5.0.0-next.63, 5.0.0-next.64, 5.0.0-next.65, 5.0.0-next.66, 5.0.0-next.67, 5.0.0-next.68, 5.0.0-next.69, 5.0.0-next.7, 5.0.0-next.70, 5.0.0-next.71, 5.0.0-next.72, 5.0.0-next.73, 5.0.0-next.74, 5.0.0-next.75, 5.0.0-next.76, 5.0.0-next.77, 5.0.0-next.78, 5.0.0-next.79, 5.0.0-next.8, 5.0.0-next.80, 5.0.0-next.81, 5.0.0-next.82, 5.0.0-next.83, 5.0.0-next.84, 5.0.0-next.85, 5.0.0-next.86, 5.0.0-next.87, 5.0.0-next.88, 5.0.0-next.89, 5.0.0-next.9, 5.0.0-next.90, 5.0.0-next.91, 5.0.0-next.92, 5.0.0-next.93, 5.0.0-next.94, 5.0.0-next.95, 5.0.0-next.96, 5.0.0-next.97, 5.0.0-next.98, 5.0.0-next.99, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, 5.1.10, 5.1.11, 5.1.12, 5.1.13, 5.1.14, 5.1.15, 5.1.16, 5.1.17, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.10.0, 5.10.1, 5.11.0, 5.11.1, 5.11.2, 5.11.3, 5.12.0, 5.13.0, 5.14.0, 5.14.1, 5.14.2, 5.14.3, 5.14.4, 5.14.5, 5.14.6, 5.15.0, 5.16.0, 5.16.1, 5.16.2, 5.16.3, 5.16.4, 5.16.5, 5.16.6, 5.17.0, 5.17.1, 5.17.2, 5.17.3, 5.17.4, 5.17.5, 5.18.0, 5.19.0, 5.19.1, 5.19.10, 5.19.2, 5.19.3, 5.19.4, 5.19.5, 5.19.6, 5.19.7, 5.19.8, 5.19.9, 5.2.0, 5.2.1, 5.2.10, 5.2.11, 5.2.12, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9, 5.20.0, 5.20.1, 5.20.2, 5.20.3, 5.20.4, 5.20.5, 5.21.0, 5.22.0, 5.22.1, 5.22.2, 5.22.3, 5.22.4, 5.22.5, 5.22.6, 5.23.0, 5.23.1, 5.23.2, 5.24.0, 5.24.1, 5.25.0, 5.25.1, 5.25.10, 5.25.11, 5.25.12, 5.25.2, 5.25.3, 5.25.4, 5.25.5, 5.25.6, 5.25.7, 5.25.8, 5.25.9, 5.26.0, 5.26.1, 5.26.2, 5.26.3, 5.27.0, 5.27.1, 5.27.2, 5.27.3, 5.28.0, 5.28.1, 5.28.2, 5.28.3, 5.28.4, 5.28.5, 5.28.6, 5.28.7, 5.29.0, 5.3.0, 5.3.1, 5.3.2, 5.30.0, 5.30.1, 5.30.2, 5.31.0, 5.31.1, 5.32.0, 5.32.1, 5.32.2, 5.33.0, 5.33.1, 5.33.10, 5.33.11, 5.33.12, 5.33.13, 5.33.14, 5.33.15, 5.33.16, 5.33.17, 5.33.2, 5.33.3, 5.33.4, 5.33.5, 5.33.6, 5.33.7, 5.33.8, 5.33.9, 5.4.0, 5.5.0, 5.5.2, 5.5.3, 5.5.4, 5.6.0, 5.6.1, 5.6.2, 5.7.0, 5.7.1, 5.8.0, 5.8.1, 5.9.0, 5.9.1]
Recommendation: Update to version 5.33.17.

Svelte vulnerable to XSS when using objects during server-side rendering

Published date: 2022-07-13T00:00:41Z
CVE: CVE-2022-25875
Links:

The package svelte before 3.49.0 is vulnerable to Cross-site Scripting (XSS) due to improper input sanitization and to improper escape of attributes when using objects during SSR (Server-Side Rendering). Exploiting this vulnerability is possible via objects with a custom toString() function.

Affected versions: ["0.2.0", "0.2.2", "1.0.0", "1.0.3", "1.0.4", "1.0.5", "1.0.6", "1.1.1", "1.2.1", "1.2.2", "1.2.3", "1.2.4", "1.3.0", "1.4.0", "1.5.0", "1.6.2", "1.6.3", "1.6.5", "1.6.6", "1.6.11", "1.7.1", "1.10.2", "1.11.0", "1.11.1", "1.11.3", "1.12.1", "1.13.0", "1.13.2", "1.13.4", "1.13.6", "1.14.0", "1.14.1", "1.15.0", "1.18.0", "1.18.1", "1.18.2", "1.19.1", "1.20.1", "1.20.2", "1.21.0", "1.22.0", "1.22.2", "1.22.5", "1.23.0", "1.23.1", "1.23.2", "1.23.4", "1.24.0", "1.26.0", "1.27.0", "1.29.1", "1.29.2", "1.30.0", "1.31.0", "1.32.0", "1.33.0", "1.34.0", "1.35.0", "1.36.0", "1.37.0", "1.39.2", "1.39.3", "1.39.4", "1.40.1", "1.40.2", "1.41.3", "1.42.0", "1.43.0", "1.43.1", "1.44.1", "1.45.0", "1.47.1", "1.49.1", "1.49.2", "1.49.3", "1.50.0", "1.50.1", "1.51.0", "1.51.1", "1.53.0", "1.54.0", "1.54.1", "1.54.2", "1.56.1", "1.56.3", "1.56.4", "1.57.0", "1.57.1", "1.57.2", "1.58.1", "1.58.3", "1.58.4", "1.58.5", "1.60.1", "1.61.0", "1.63.0", "2.1.0", "2.3.0", "2.4.0", "2.4.3", "2.4.4", "2.5.0", "2.6.0", "2.6.1", "2.6.4", "2.6.5", "2.8.0", "2.8.1", "2.9.1", "2.9.2", "2.9.3", "2.9.4", "2.9.6", "2.9.9", "2.12.1", "2.13.0", "2.13.1", "2.13.2", "0.0.1", "0.0.2", "0.1.0", "0.1.1", "0.2.1", "0.3.0", "1.0.1", "1.0.2", "1.0.7", "1.1.0", "1.1.2", "1.1.3", "1.2.0", "1.2.5", "1.3.1", "1.6.0", "1.6.1", "1.6.4", "1.6.7", "1.6.8", "1.6.9", "1.6.10", "1.7.0", "1.8.0", "1.8.1", "1.9.0", "1.9.1", "1.10.0", "1.10.1", "1.10.3", "1.11.2", "1.11.4", "1.12.0", "1.13.1", "1.13.3", "1.13.5", "1.13.7", "1.15.1", "1.16.0", "1.17.0", "1.17.1", "1.17.2", "1.19.0", "1.20.0", "1.22.1", "1.22.3", "1.22.4", "1.23.3", "1.25.0", "1.25.1", "1.26.1", "1.26.2", "1.28.0", "1.28.1", "1.29.0", "1.29.3", "1.38.0", "1.39.0", "1.39.1", "1.40.0", "1.41.0", "1.41.1", "1.41.2", "1.41.4", "1.42.1", "1.44.0", "1.44.2", "1.46.0", "1.46.1", "1.47.0", "1.47.2", "1.48.0", "1.49.0", "1.52.0", "1.55.0", "1.55.1", "1.56.0", "1.56.2", "1.57.3", "1.57.4", "1.58.0", "1.58.2", "1.59.0", "1.60.0", "1.60.2", "1.60.3", "1.62.0", "1.63.1", "1.64.0", "1.64.1", "2.0.0", "2.1.1", "2.2.0", "2.4.1", "2.4.2", "2.5.1", "2.6.2", "2.6.3", "2.6.6", "2.7.0", "2.7.1", "2.7.2", "2.9.0", "2.9.5", "2.9.7", "2.9.8", "2.9.10", "2.9.11", "2.10.0", "2.10.1", "2.11.0", "2.12.0", "2.13.4", "2.13.5", "2.14.0", "2.14.1", "3.0.0-alpha1", "3.0.0-alpha3", "3.0.0-alpha6", "3.0.0-alpha10", "3.0.0-alpha14", "3.0.0-alpha16", "3.0.0-alpha18", "3.0.0-alpha19", "3.0.0-alpha21", "3.0.0-alpha22", "3.0.0-alpha23", "3.0.0-beta.1", "3.0.0-beta.3", "3.0.0-beta.5", "3.0.0-beta.11", "3.0.0-beta.12", "3.0.0-beta.17", "3.0.0-beta.22", "3.0.0-beta.25", "3.0.0-beta.26", "3.0.1", "3.3.0", "3.4.0", "3.4.3", "3.6.0", "3.6.4", "3.6.6", "3.6.7", "3.6.8", "3.6.9", "3.8.0", "3.9.1", "3.9.2", "3.10.1", "3.11.0", "3.12.1", "3.13.0-alpha.1", "3.13.0-alpha.2", "3.13.0", "3.16.0", "3.16.1", "3.16.2", "3.16.4", "3.16.5", "3.16.6", "3.16.7", "3.17.1", "3.17.2", "3.17.3", "3.18.0", "3.18.1", "3.18.2", "3.20.1", "3.21.0", "3.22.1", "3.23.1", "3.28.0", "3.29.0", "3.29.1", "3.29.2", "3.29.3", "2.13.3", "2.14.2", "2.14.3", "2.15.0", "2.15.1", "2.15.2", "2.15.3", "3.0.0-alpha2", "2.16.0", "3.0.0-alpha4", "3.0.0-alpha5", "3.0.0-alpha7", "3.0.0-alpha8", "3.0.0-alpha9", "3.0.0-alpha11", "3.0.0-alpha12", "3.0.0-alpha13", "3.0.0-alpha15", "3.0.0-alpha17", "3.0.0-alpha20", "3.0.0-alpha24", "3.0.0-alpha25", "3.0.0-alpha26", "3.0.0-alpha27", "3.0.0-beta.2", "2.16.1", "3.0.0-beta.4", "3.0.0-beta.6", "3.0.0-beta.7", "3.0.0-beta.8", "3.0.0-beta.9", "3.0.0-beta.10", "3.0.0-beta.13", "3.0.0-beta.14", "3.0.0-beta.15", "3.0.0-beta.16", "3.0.0-beta.18", "3.0.0-beta.19", "3.0.0-beta.20", "3.0.0-beta.21", "3.0.0-beta.23", "3.0.0-beta.27", "3.0.0-beta.28", "3.0.0", "3.1.0", "3.2.0", "3.2.1", "3.2.2", "3.4.1", "3.4.2", "3.4.4", "3.5.0", "3.5.1", "3.5.2", "3.5.3", "3.5.4", "3.6.1", "3.6.2", "3.6.3", "3.6.5", "3.6.10", "3.6.11", "3.7.0", "3.7.1", "3.8.1", "3.9.0", "3.10.0", "3.12.0", "3.13.0-alpha.0", "3.14.0", "3.14.1", "3.15.0", "3.16.3", "3.17.0", "3.19.0", "3.19.1", "3.19.2", "3.20.0", "3.22.0", "3.22.2", "3.22.3", "3.23.0", "3.23.2", "3.24.0", "3.24.1", "3.25.0", "3.25.1", "3.26.0", "3.27.0", "3.29.4", "3.29.5", "3.29.6", "3.29.7", "3.30.0", "3.30.1", "3.31.0", "3.31.1", "3.31.2", "3.32.0", "3.32.1", "3.32.2", "3.32.3", "3.34.0", "3.33.0", "3.35.0", "3.36.0", "3.37.0", "3.38.0", "3.38.1", "3.38.2", "3.38.3", "3.39.0", "3.40.0", "3.40.1", "3.40.2", "3.40.3", "3.41.0", "3.42.1", "3.42.0", "3.42.2", "3.42.3", "3.42.4", "3.42.5", "3.42.6", "3.43.0", "3.43.1", "3.43.2", "3.44.0", "3.44.1", "3.44.2", "3.44.3", "3.45.0", "3.46.0", "3.46.1", "3.46.2", "3.46.3", "3.46.4", "3.46.5", "3.46.6", "3.47.0", "3.48.0"]
Secure versions: [4.2.19, 4.2.20, 5.0.0, 5.0.0-next.1, 5.0.0-next.10, 5.0.0-next.100, 5.0.0-next.101, 5.0.0-next.102, 5.0.0-next.103, 5.0.0-next.104, 5.0.0-next.105, 5.0.0-next.106, 5.0.0-next.107, 5.0.0-next.108, 5.0.0-next.109, 5.0.0-next.11, 5.0.0-next.110, 5.0.0-next.111, 5.0.0-next.112, 5.0.0-next.113, 5.0.0-next.114, 5.0.0-next.115, 5.0.0-next.116, 5.0.0-next.117, 5.0.0-next.118, 5.0.0-next.119, 5.0.0-next.12, 5.0.0-next.120, 5.0.0-next.121, 5.0.0-next.123, 5.0.0-next.125, 5.0.0-next.126, 5.0.0-next.127, 5.0.0-next.128, 5.0.0-next.129, 5.0.0-next.13, 5.0.0-next.130, 5.0.0-next.131, 5.0.0-next.132, 5.0.0-next.133, 5.0.0-next.134, 5.0.0-next.135, 5.0.0-next.136, 5.0.0-next.137, 5.0.0-next.138, 5.0.0-next.139, 5.0.0-next.14, 5.0.0-next.140, 5.0.0-next.141, 5.0.0-next.142, 5.0.0-next.143, 5.0.0-next.144, 5.0.0-next.147, 5.0.0-next.148, 5.0.0-next.149, 5.0.0-next.15, 5.0.0-next.150, 5.0.0-next.151, 5.0.0-next.152, 5.0.0-next.153, 5.0.0-next.154, 5.0.0-next.155, 5.0.0-next.157, 5.0.0-next.158, 5.0.0-next.159, 5.0.0-next.16, 5.0.0-next.160, 5.0.0-next.162, 5.0.0-next.163, 5.0.0-next.164, 5.0.0-next.165, 5.0.0-next.166, 5.0.0-next.167, 5.0.0-next.168, 5.0.0-next.169, 5.0.0-next.17, 5.0.0-next.170, 5.0.0-next.171, 5.0.0-next.172, 5.0.0-next.173, 5.0.0-next.174, 5.0.0-next.175, 5.0.0-next.176, 5.0.0-next.177, 5.0.0-next.178, 5.0.0-next.179, 5.0.0-next.18, 5.0.0-next.180, 5.0.0-next.181, 5.0.0-next.182, 5.0.0-next.183, 5.0.0-next.184, 5.0.0-next.185, 5.0.0-next.186, 5.0.0-next.187, 5.0.0-next.188, 5.0.0-next.189, 5.0.0-next.19, 5.0.0-next.190, 5.0.0-next.191, 5.0.0-next.192, 5.0.0-next.193, 5.0.0-next.194, 5.0.0-next.195, 5.0.0-next.196, 5.0.0-next.197, 5.0.0-next.198, 5.0.0-next.199, 5.0.0-next.2, 5.0.0-next.20, 5.0.0-next.200, 5.0.0-next.201, 5.0.0-next.202, 5.0.0-next.203, 5.0.0-next.204, 5.0.0-next.205, 5.0.0-next.206, 5.0.0-next.207, 5.0.0-next.208, 5.0.0-next.21, 5.0.0-next.210, 5.0.0-next.211, 5.0.0-next.212, 5.0.0-next.213, 5.0.0-next.214, 5.0.0-next.215, 5.0.0-next.216, 5.0.0-next.217, 5.0.0-next.218, 5.0.0-next.219, 5.0.0-next.22, 5.0.0-next.220, 5.0.0-next.221, 5.0.0-next.222, 5.0.0-next.223, 5.0.0-next.224, 5.0.0-next.225, 5.0.0-next.226, 5.0.0-next.227, 5.0.0-next.228, 5.0.0-next.229, 5.0.0-next.23, 5.0.0-next.230, 5.0.0-next.231, 5.0.0-next.232, 5.0.0-next.233, 5.0.0-next.234, 5.0.0-next.235, 5.0.0-next.236, 5.0.0-next.237, 5.0.0-next.238, 5.0.0-next.239, 5.0.0-next.24, 5.0.0-next.240, 5.0.0-next.241, 5.0.0-next.242, 5.0.0-next.243, 5.0.0-next.244, 5.0.0-next.245, 5.0.0-next.246, 5.0.0-next.247, 5.0.0-next.248, 5.0.0-next.249, 5.0.0-next.25, 5.0.0-next.250, 5.0.0-next.251, 5.0.0-next.252, 5.0.0-next.253, 5.0.0-next.254, 5.0.0-next.255, 5.0.0-next.256, 5.0.0-next.257, 5.0.0-next.258, 5.0.0-next.259, 5.0.0-next.26, 5.0.0-next.260, 5.0.0-next.262, 5.0.0-next.263, 5.0.0-next.264, 5.0.0-next.265, 5.0.0-next.266, 5.0.0-next.267, 5.0.0-next.268, 5.0.0-next.269, 5.0.0-next.27, 5.0.0-next.270, 5.0.0-next.271, 5.0.0-next.272, 5.0.0-next.28, 5.0.0-next.29, 5.0.0-next.3, 5.0.0-next.30, 5.0.0-next.31, 5.0.0-next.32, 5.0.0-next.33, 5.0.0-next.34, 5.0.0-next.35, 5.0.0-next.36, 5.0.0-next.37, 5.0.0-next.38, 5.0.0-next.39, 5.0.0-next.4, 5.0.0-next.40, 5.0.0-next.41, 5.0.0-next.42, 5.0.0-next.43, 5.0.0-next.44, 5.0.0-next.45, 5.0.0-next.46, 5.0.0-next.47, 5.0.0-next.48, 5.0.0-next.49, 5.0.0-next.5, 5.0.0-next.50, 5.0.0-next.51, 5.0.0-next.52, 5.0.0-next.53, 5.0.0-next.54, 5.0.0-next.55, 5.0.0-next.56, 5.0.0-next.57, 5.0.0-next.58, 5.0.0-next.59, 5.0.0-next.6, 5.0.0-next.60, 5.0.0-next.61, 5.0.0-next.62, 5.0.0-next.63, 5.0.0-next.64, 5.0.0-next.65, 5.0.0-next.66, 5.0.0-next.67, 5.0.0-next.68, 5.0.0-next.69, 5.0.0-next.7, 5.0.0-next.70, 5.0.0-next.71, 5.0.0-next.72, 5.0.0-next.73, 5.0.0-next.74, 5.0.0-next.75, 5.0.0-next.76, 5.0.0-next.77, 5.0.0-next.78, 5.0.0-next.79, 5.0.0-next.8, 5.0.0-next.80, 5.0.0-next.81, 5.0.0-next.82, 5.0.0-next.83, 5.0.0-next.84, 5.0.0-next.85, 5.0.0-next.86, 5.0.0-next.87, 5.0.0-next.88, 5.0.0-next.89, 5.0.0-next.9, 5.0.0-next.90, 5.0.0-next.91, 5.0.0-next.92, 5.0.0-next.93, 5.0.0-next.94, 5.0.0-next.95, 5.0.0-next.96, 5.0.0-next.97, 5.0.0-next.98, 5.0.0-next.99, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.1.0, 5.1.1, 5.1.10, 5.1.11, 5.1.12, 5.1.13, 5.1.14, 5.1.15, 5.1.16, 5.1.17, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.10.0, 5.10.1, 5.11.0, 5.11.1, 5.11.2, 5.11.3, 5.12.0, 5.13.0, 5.14.0, 5.14.1, 5.14.2, 5.14.3, 5.14.4, 5.14.5, 5.14.6, 5.15.0, 5.16.0, 5.16.1, 5.16.2, 5.16.3, 5.16.4, 5.16.5, 5.16.6, 5.17.0, 5.17.1, 5.17.2, 5.17.3, 5.17.4, 5.17.5, 5.18.0, 5.19.0, 5.19.1, 5.19.10, 5.19.2, 5.19.3, 5.19.4, 5.19.5, 5.19.6, 5.19.7, 5.19.8, 5.19.9, 5.2.0, 5.2.1, 5.2.10, 5.2.11, 5.2.12, 5.2.2, 5.2.3, 5.2.4, 5.2.5, 5.2.6, 5.2.7, 5.2.8, 5.2.9, 5.20.0, 5.20.1, 5.20.2, 5.20.3, 5.20.4, 5.20.5, 5.21.0, 5.22.0, 5.22.1, 5.22.2, 5.22.3, 5.22.4, 5.22.5, 5.22.6, 5.23.0, 5.23.1, 5.23.2, 5.24.0, 5.24.1, 5.25.0, 5.25.1, 5.25.10, 5.25.11, 5.25.12, 5.25.2, 5.25.3, 5.25.4, 5.25.5, 5.25.6, 5.25.7, 5.25.8, 5.25.9, 5.26.0, 5.26.1, 5.26.2, 5.26.3, 5.27.0, 5.27.1, 5.27.2, 5.27.3, 5.28.0, 5.28.1, 5.28.2, 5.28.3, 5.28.4, 5.28.5, 5.28.6, 5.28.7, 5.29.0, 5.3.0, 5.3.1, 5.3.2, 5.30.0, 5.30.1, 5.30.2, 5.31.0, 5.31.1, 5.32.0, 5.32.1, 5.32.2, 5.33.0, 5.33.1, 5.33.10, 5.33.11, 5.33.12, 5.33.13, 5.33.14, 5.33.15, 5.33.16, 5.33.17, 5.33.2, 5.33.3, 5.33.4, 5.33.5, 5.33.6, 5.33.7, 5.33.8, 5.33.9, 5.4.0, 5.5.0, 5.5.2, 5.5.3, 5.5.4, 5.6.0, 5.6.1, 5.6.2, 5.7.0, 5.7.1, 5.8.0, 5.8.1, 5.9.0, 5.9.1]
Recommendation: Update to version 5.33.17.

920 Other Versions

Version License Security Released
5.33.17 MIT 2025-06-07 - 12:34 1 day
5.33.16 MIT 2025-06-07 - 01:33 2 days
5.33.15 MIT 2025-06-06 - 21:03 2 days
5.33.14 MIT 2025-06-02 - 20:02 6 days
5.33.13 MIT 2025-06-02 - 00:46 7 days
5.33.12 MIT 2025-06-01 - 20:52 7 days
5.33.11 MIT 2025-05-31 - 19:41 8 days
5.33.10 MIT 2025-05-29 - 19:17 10 days
5.33.9 MIT 2025-05-29 - 16:27 10 days
5.33.8 MIT 2025-05-29 - 14:53 10 days
5.33.7 MIT 2025-05-29 - 12:50 10 days
5.33.6 MIT 2025-05-29 - 02:25 11 days
5.33.5 MIT 2025-05-28 - 21:40 11 days
5.33.4 MIT 2025-05-27 - 13:13 12 days
5.33.3 MIT 2025-05-26 - 22:59 13 days
5.33.2 MIT 2025-05-25 - 15:10 14 days
5.33.1 MIT 2025-05-22 - 21:15 17 days
5.33.0 MIT 2025-05-22 - 15:29 17 days
5.32.2 MIT 2025-05-22 - 15:21 17 days
5.32.1 MIT 2025-05-20 - 18:16 19 days
5.32.0 MIT 2025-05-20 - 15:31 19 days
5.31.1 MIT 2025-05-19 - 19:41 20 days
5.31.0 MIT 2025-05-19 - 15:59 20 days
5.30.2 MIT 2025-05-17 - 09:07 22 days
5.30.1 MIT 2025-05-14 - 22:29 25 days
5.30.0 MIT 2025-05-14 - 20:05 25 days
5.29.0 MIT 2025-05-14 - 17:38 25 days
5.28.7 MIT 2025-05-14 - 17:24 25 days
5.28.6 MIT 2025-05-13 - 01:25 27 days
5.28.5 MIT 2025-05-13 - 00:31 27 days
5.28.4 MIT 2025-05-12 - 23:53 27 days
5.28.3 MIT 2025-05-12 - 20:05 27 days
5.28.2 MIT 2025-04-22 - 10:20 about 2 months
5.28.1 MIT 2025-04-18 - 16:21 about 2 months
5.28.0 MIT 2025-04-18 - 15:29 about 2 months
5.27.3 MIT 2025-04-18 - 01:13 about 2 months
5.27.2 MIT 2025-04-17 - 19:07 about 2 months
5.27.1 MIT 2025-04-17 - 13:05 about 2 months
5.27.0 MIT 2025-04-15 - 02:25 about 2 months
5.26.3 MIT 2025-04-14 - 13:14 about 2 months
5.26.2 MIT 2025-04-12 - 14:45 about 2 months
5.26.1 MIT 2025-04-11 - 21:18 about 2 months
5.26.0 MIT 2025-04-11 - 21:05 about 2 months
5.25.12 MIT 2025-04-10 - 22:42 about 2 months
5.25.11 MIT 2025-04-10 - 19:42 about 2 months
5.25.10 MIT 2025-04-09 - 18:12 2 months
5.25.9 MIT 2025-04-08 - 21:12 2 months
5.25.8 MIT 2025-04-07 - 14:33 2 months
5.25.7 MIT 2025-04-05 - 15:59 2 months
5.25.6 MIT 2025-04-01 - 12:23 2 months