AS
Product
@astrojs/node
4
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 0
Watch
Add @astrojs/node to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25545 | 8.6 | Feb 24 | Astro has Full-Read SSRF in error rendering via Host: header injection Affected: before 9.5.4 |
| CVE-2026-29772 | 7.5 | Mar 24 | Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands Affected: 9.0.0 before 10.0.0 |
| CVE-2026-27729 | 7.5 | Feb 24 | Astro has memory exhaustion DoS due to missing request body size limit in Server Actions Affected: 9.0.0 before 9.5.4 |
| CVE-2026-27829 | 7.2 | Feb 26 | Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize Affected: 9.0.0 before 9.5.4 |
Showing 4