Exposure of Astro

JavaScript frameworks, Static site generator
48
exposure score
49,450
sites use
0
exploited
1
critical

CVEs

45 results
CVE-2026-42349HIGHClerk: Authorization bypass when combining organization, billing, or reverification checksEPSS 0.2%CVE-2026-54298MEDIUMAstro: XSS via Unescaped Attribute Names in Spread PropsEPSS 0.2%CVE-2024-56140MEDIUMBypass of CSRF Middleware in AstroEPSS 0.2%CVE-2026-41067MEDIUMAstro: XSS via incomplete `</script>` sanitization in `define:vars` allows case-insensitive and whitespace-based bypassEPSS 0.2%CVE-2026-45028LOWAstro: Server island encrypted parameters vulnerable to cross-component replayEPSS 0.1%