Exposición de Astro

JavaScript frameworks, Static site generator
48
score de exposición
49.450
sitios usan
0
en explotación
1
críticos

CVEs

45 resultados
CVE-2026-73424MEDIUMAstro: Unauthenticated path override in the @astrojs/vercel ISR functionEPSS 0.4%CVE-2026-102984HIGHAstro: Malformed port in the Host header can crash the Node adapterEPSS 0.4%CVE-2025-59837HIGHastro allows bypass of image proxy domain validation leading to SSRF and potential XSSEPSS 0.4%CVE-2026-33768MEDIUMAstro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`EPSS 0.3%CVE-2026-33769LOWAstro: Remote allowlist bypass via unanchored matchPathname wildcardEPSS 0.3%CVE-2026-54299HIGHAstro: Host-header full-read SSRF in core prerendered error-page fetch (prerenderedErrorPageFetch default + unvalidated createRequestFromNodeRequest URL)EPSS 0.3%CVE-2026-59731HIGHAstro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization MismatchEPSS 0.3%CVE-2026-41248CRITICALOfficial Clerk JavaScript SDKs: Middleware-based route protection bypassEPSS 0.3%CVE-2026-59728MEDIUM@astrojs/rss: XML Injection via Unescaped RSS Feed FieldsEPSS 0.3%CVE-2026-114128MEDIUMAstro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX renderingEPSS 0.3%CVE-2026-27829MEDIUMAstro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSizeEPSS 0.3%CVE-2025-66202MEDIUMAstro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765EPSS 0.3%CVE-2026-54300MEDIUM@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN configEPSS 0.3%CVE-2026-102983MEDIUMAstro: Netlify Image CDN allowlist bypass enables SSRFEPSS 0.3%CVE-2026-41322MEDIUM@astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformedEPSS 0.3%CVE-2025-65019MEDIUMAstro Cloudflare adapter has a Stored Cross Site Scripting vulnerability in /_image endpointEPSS 0.3%CVE-2026-73425LOW@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escapedEPSS 0.3%CVE-2026-50146HIGHAstro: Reflected XSS via unescaped slot nameEPSS 0.3%CVE-2026-73423MEDIUMAstro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misorderedEPSS 0.3%CVE-2025-64745LOWAstro development server error page vulnerable to reflected Cross-site ScriptingEPSS 0.3%