withastro astro

3 known vulnerabilities in withastro astro, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102984 CVSS 8.2 high Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host…
  • CVE-2026-102983 CVSS 6.3 medium Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions…
  • CVE-2026-84376 CVSS 6.3 medium Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured non-root base path from request…