preact

11.0.1 · 8 Oct 2026MIT23.2M / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for preact. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	11.0.1	No known advisory
	10.29.8	Safe from 10.28.2

Your version

High
Preact has JSON VNode Injection issueGHSA-36hm-qxxp-pg3m · 7 Jan 2026
- 10.x10.26.5 – 10.28.1Fixed in 10.28.2
Moderate
HTML Injection in preactGHSA-cg48-9hh2-x6mx · 2 Sep 2020
>= 10.0.0-alpha.0, < 10.0.0-beta.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 22 Oct 2026. Releases and advisories last read 22 Oct 2026.