ExploitedPHP2Shell is now on CISA KEV

svelte@5.57.3

Wait — 5.57.1 is the safer choice for now.

Published 22 h ago; most regressions surface within 72 h.

Why this verdict

  • Published 22 h ago; most regressions surface within 72 h.Evidence

Confidence 100% · algorithm v1 · computed 2026-10-27. How verdicts work

Supply chain and security

Malware reports
None known (OSV)
Known advisories
None known (OSV)
License
MIT
Install scripts
None
Build provenance
Signed provenance
Weekly downloads
22,840

Compatibility

No compatibility boundary is crossed: this is a patch or minor release on a stable major.

3 issues mention this version in sveltejs/svelte so far (14-day window still open). See them on GitHub

Check the official release notes below for behaviour changes before merging.

Release notes

Read the Svelte changelog on Changes.Watch or the package page on npm for this version’s features and fixes.

Deprecations and deadlines

The maintainer has not deprecated this version on npm.

Did upgrading to 5.57.3 work for you?

Results appear once three developers have voted.

More svelte verdicts