From efd3cce5ad5fabe12a5a84a1f2328a0f6a89ad5c Mon Sep 17 00:00:00 2001
From: Rich Harris <richard.a.harris@gmail.com>
Date: Wed, 1 Aug 2018 17:39:10 -0400
Subject: [PATCH] -> v2.9.8

---
 CHANGELOG.md | 4 ++++
 package.json | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index aec56e200b..1f74908bc9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Svelte changelog
 
+## 2.9.8
+
+* Sanitize spread attributes in SSR — fixes vulnerability CVE-2018-6341 ([#1623](https://github.com/sveltejs/svelte/pull/1623))
+
 ## 2.9.7
 
 * Allow `<input type=file bind:files>` ([#1608](https://github.com/sveltejs/svelte/issues/1608))
diff --git a/package.json b/package.json
index af2a3edcc4..8694352e1b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "svelte",
-  "version": "2.9.7",
+  "version": "2.9.8",
   "description": "The magical disappearing UI framework",
   "main": "compiler/svelte.js",
   "bin": {