PatchTheCVEswiper vulnerabilities and fixes
Recent CVEs affecting swiper, with upgrade or downgrade steps. 4 tracked.
swiper has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-21. Highest priority: CVE-2024-39853 (score 44/100).
- CVE-2026-27212 HIGH 7.8 UPGRADE Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior
- CVE-2024-39853 MEDIUM 6.5 DOWNGRADE adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse
- CVE-2024-39000 MEDIUM 6.5 DOWNGRADE adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse
- CVE-2024-38997 MEDIUM 6.5 DOWNGRADE adolph_dudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefault
FAQ
How do I fix swiper vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is swiper being exploited right now?
None of the tracked swiper CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which swiper CVE should I patch first?
CVE-2024-39853 currently ranks highest (44/100): adolph_dudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse.