UnratedFix available
@sveltejs/kit@3.0.0-next.32
Type: patchSources: SvelteKit
This release fixes path traversal when previewing prerendered pages and data on Windows, and prevents enhanced form results from navigating to another origin.
- Products
- @sveltejs/kit
- Affected versions
- Not specified
- Fixed versions
- 3.0.0-next.32
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 12:21 UTC · Revision 1
Source evidence
This release fixes path traversal when previewing prerendered pages and data on Windows, and prevents enhanced form results from navigating to another origin.
fix: prevent path traversal when previewing prerendered pages and data on Windows (538edbf)
@sveltejs/kit
Fixed versions: 3.0.0-next.32
Complete source record
{
"id": "3bea2d8c9377daf3077f11b738cb7ed94a8dafb0baf506d853ef0f250950ac3f",
"url": "https://github.com/sveltejs/kit/releases/tag/%40sveltejs%2Fkit%403.0.0-next.32",
"method": "llm",
"payload": {
"kind": "patch",
"title": "@sveltejs/kit@3.0.0-next.32",
"summary": "This release fixes path traversal when previewing prerendered pages and data on Windows, and prevents enhanced form results from navigating to another origin.",
"evidence": "fix: prevent path traversal when previewing prerendered pages and data on Windows (538edbf)",
"products": [
{
"name": {
"value": "@sveltejs/kit",
"evidence": "@sveltejs/kit@3.0.0-next.32"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.0.0-next.32",
"evidence": "@sveltejs/kit@3.0.0-next.32"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-sveltejs-kit",
"document_id": 22728,
"published_at": "2026-10-01T15:58:56+00:00"
}