AS
Product
Astro
20
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 17Low 1
Watch
Add Astro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54299 | 7.5 | Jun 22 | Astro: Host-header full-read SSRF in core prerendered error-page fetch (prerenderedErrorPageFetch default + unvalidated createRequestFromNodeRequest URL) Affected: before 6.4.6 |
| CVE-2025-59837 | 7.2 | Oct 28 | astro allows bypass of image proxy domain validation leading to SSRF and potential XSS Affected: 5.13.4 before 5.13.10 |
Showing 2