CVE-2026-114062Medium· 5.3▾ SunlitSvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or fo…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
0.3% → 0.4%
SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirects automatically. Attackers can manipulate the Host or forwarded headers to point fallback requests at their server, which redirects them to internal services.
kit < 3.0.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114061Medium· 4.7SvelteKit before 3.0.0 XSS via Cache-Control Header in Prerendered Pages
CVE-2026-114063High· 7.5SvelteKit 2.10.0 before 3.0.0 Path Traversal via vite preview on Windows
CVE-2025-68616High· 7.5WeasyPrint helps web developers to create PDF documents
CVE-2023-29008High· 8.8SvelteKit framework has Insufficient CSRF protection for CORS requests
CVE-2026-114060Low· 4.7SvelteKit: URL redirection to untrusted site via enhanced form submission
CVE-2025-61916High· 7.9Spinnaker is an open source, multi-cloud continuous delivery platform