CVE-2021-29261: Svelte

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration.

Affected products

• Svelte Svelte: before 104.8.0 (fixed in 104.8.0)

Published 2021-04-05. Last modified 2026-06-17.