withastro astro vulnerabilities
48 published CVEs name withastro astro among the affected products.
- 48Published CVEs48 of them scored
- 39Last 12 monthspublished in the last year
- 0Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-126365
Astro: XSS via unescaped code for unsupported languages in @astrojs/prism
withastro · astro
Medium5.4 - CVE-2026-126364
Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
withastro · astro
Medium6.3 - CVE-2026-126363
Astro: Reflected XSS via unescaped slot names in @astrojs/solid-js
withastro · astro
Low2.3 - CVE-2026-126362
Astro: Reflected XSS via unescaped slot names in @astrojs/svelte
withastro · astro
Low2.3 - CVE-2026-126361
Astro: XSS via attribute injection in dynamic tag names
withastro · astro
Low2.3 - CVE-2026-114128
Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering
withastro · astro
Medium6.5 - CVE-2026-114127
Astro: Arbitrary CSS injection in Astro View Transitions
withastro · astro
Low2.3 - CVE-2026-102984
Astro: Malformed port in the Host header can crash the Node adapter
withastro · astro
High8.2 - CVE-2026-102983
Astro: Netlify Image CDN allowlist bypass enables SSRF
withastro · astro
Medium6.3 - CVE-2026-84376
Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base
withastro · astro
Medium6.3