---
id: "GHSA-jf9x-2fg2-hx4w"
page: "https://infrastack.ai/live/GHSA-jf9x-2fg2-hx4w"
kind: "vulnerability"
aliases: ["GHSA-jf9x-2fg2-hx4w"]
title: "Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "package"
products: [{"name": "@sveltejs/adapter-vercel", "fixed": ["6.3.5", "7.0.2"], "affected": "<= 6.3.5, 7.0.0, 7.0.1", "ecosystem": "npm"}, {"name": "@sveltejs/adapter-static", "fixed": ["3.0.11", "4.0.1"], "affected": "<= 3.0.10, 4.0.0", "ecosystem": "npm"}]
ecosystems: ["npm"]
tags: ["cwe-116", "cwe-625", "npm", "package", "svelte", "sveltekit", "vercel"]
not_affected_if: ["managed-hosting-without-adapter", "no-prerendered-paths"]
published_at: "2026-10-29T23:47:18+00:00"
first_seen_at: "2026-11-09T22:53:16+00:00"
updated_at: "2026-11-09T22:56:17+00:00"
sources: [{"source": "ghsa-repo", "url": "https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w", "first_seen_at": "2026-11-09T22:53:16+00:00"}]
exploit_sources: []
---

# Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static

Link for people: https://infrastack.ai/live/GHSA-jf9x-2fg2-hx4w (this .md is for agents)

The Vercel and static adapters for SvelteKit write prerendered page paths into Vercel routing config as regular expressions without escaping them. A path crawled during prerendering that an attacker influenced could be read as a regex pattern, which could change how routes match.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- npm:@sveltejs/adapter-vercel affected <= 6.3.5, 7.0.0, 7.0.1 fixed 6.3.5, 7.0.2
- npm:@sveltejs/adapter-static affected <= 3.0.10, 4.0.0 fixed 3.0.11, 4.0.1

## How to check

- Check the installed version with `npm ls @sveltejs/adapter-vercel @sveltejs/adapter-static`
- Look for `@sveltejs/adapter-vercel` or `@sveltejs/adapter-static` in `package.json` and `package-lock.json`

## Fix

- @sveltejs/adapter-vercel: `6.3.5` (6 line) or `7.0.2` (7 line)
- @sveltejs/adapter-static: `3.0.11` (3 line) or `4.0.1` (4 line)

## Timeline

- 2026-11-09T22:53:16+00:00 ghsa-repo https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w

## Documents

- [advisory] Maintainer's advisory: github.com https://github.com/sveltejs/kit/security/advisories/GHSA-jf9x-2fg2-hx4w

## From the sources

If an attacker could influence a link that was crawled during the prerender phase, that link could later be interpreted as a regex in the Vercel routing configuration.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_