Vulnerability GHSA-5wg4-q3ww-283h
Medium Risk
MEDIUM RISK
CVSS Score: 5.9
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
4 hours ago
November 13, 2026 at 08:39 PM UTC
SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`
>=4.7.0 <7.2.10, >=8.0.0-next.0 <8.0.2
>=4.7.0 <7.2.10, >=8.0.0-next.0 <8.0.2
Summary
SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`
Details
If an attacker can influence the links crawled during prerendering, they can influence the redirects entries that are added to the Cloudflare platform redirects generated during the adapt phase of the build.
Impacted packages
Timeline
Published
4 hours ago
November 13, 2026 at 08:39 PM UTC
Fixed (8.0.2)
15 days ago
October 29, 2026 at 11:50 PM UTC
Last Modified
4 hours ago
November 13, 2026 at 08:45 PM UTC