CompatHub
Check EOL

Svelte 5.36 lifecycle

Current status

standard supportlow

Svelte 5.36 is currently in standard support.

Security: 6 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Svelte GitHub Releases

Support phase
standard support
End of life
Not officially published
Latest release
5.36.17
Released
25 Jul 2025

At a glance

Version line
5.36
Initial release
14 Jul 2025
Lifecycle phase
standard support
Latest stable
5.36.17
Latest release date
25 Jul 2025
EOL
Not officially published
Risk
low
Releases tracked
17

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    14 Jul 2025

  2. standard supportcurrent

    14 Jul 2025 → —

    Source: Svelte GitHub Releases

Svelte 5.36 is currently in standard support.

Upgrade options

Newer supported Svelte version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.

You are on Svelte 5.36

Supported

Supported upgrade options

Open full upgrade planner for Svelte 5.36 →

Security

Advisories affecting Svelte 5.36 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
6
Known exploited
0
Highest CVSS
—
  • CVE-2026-42573GHSA-rcqx-6q8c-2c42

    Svelte Vulnerable to XSS via DOM Clobbering of Internal Framework State

    Affected:
    <5.55.7
    Fixed in:
    5.55.7
    Source:
    OSV source · Advisory
  • CVE-2026-42599GHSA-pr6f-5x2q-rwfp

    Svelte SSR vulnerable to cross-site scripting via spread attributes

    Affected:
    <5.55.7
    Fixed in:
    5.55.7
    Source:
    OSV source · Advisory
  • CVE-2026-27901GHSA-phwv-c562-gvmh

    Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`

    Affected:
    <5.53.5
    Fixed in:
    5.53.5
    Source:
    OSV source · Advisory
  • CVE-2026-27125GHSA-crpf-4hrx-3jrp

    Svelte SSR attribute spreading includes inherited properties from prototype chain

    Affected:
    <5.51.5
    Fixed in:
    5.51.5
    Source:
    OSV source · Advisory
  • CVE-2026-27122GHSA-m56q-vw4c-c2cp

    Svelte SSR does not validate dynamic element tag names in `<svelte:element>`

    Affected:
    <5.51.5
    Fixed in:
    5.51.5
    Source:
    OSV source · Advisory
  • CVE-2026-27121GHSA-f7gr-6p89-r883

    Svelte affected by cross-site scripting via spread attributes in Svelte SSR

    Affected:
    <5.51.5
    Fixed in:
    5.51.5
    Source:
    OSV source · Advisory

Latest release

5.36.17

Released 25 Jul 2025 · stable

https://github.com/sveltejs/svelte/releases/tag/svelte%405.36.17

Previous releases

  • 5.36.16

    24 Jul 2025

  • 5.36.15

    24 Jul 2025

  • 5.36.14

    23 Jul 2025

Release history

17 concrete releases tracked for this line.

VersionRelease dateChannelSource
5.36.1725 Jul 2025stableSource
5.36.1624 Jul 2025stableSource
5.36.1524 Jul 2025stableSource
5.36.1423 Jul 2025stableSource
5.36.1321 Jul 2025stableSource
5.36.1220 Jul 2025stableSource
5.36.1019 Jul 2025stableSource
5.36.919 Jul 2025stableSource
5.36.818 Jul 2025stableSource
5.36.717 Jul 2025stableSource
5.36.617 Jul 2025stableSource
5.36.517 Jul 2025stableSource
5.36.416 Jul 2025stableSource
5.36.316 Jul 2025stableSource
5.36.215 Jul 2025stableSource
5.36.115 Jul 2025stableSource
5.36.014 Jul 2025stableSource

Release activity

Total releases
17
Last 30 days
0
Last 90 days
0
Avg. interval
~1 days
Most recent
25 Jul 2025

Should I use this version?

Suitable for new deployments

Svelte 5.36 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

5.365.57
Statusstandard supportstandard support
Latest release5.36.175.57.0
EOLNot publishedNot published
Risklowlow

Compatibility

Evidence-backed compatibility results involving Svelte 5.36. Only combinations CompatHub can evaluate from upstream sources are listed.

Compatible targets

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
17
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Svelte versions