Known Vulnerabilities for products from Astro
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Astro".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102984 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102983 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-84376 json | Not Provided | 2026-09-02 | 2026-09-04 | |
| CVE-2026-73425 json | Not Provided | 2026-08-12 | 2026-08-13 | |
| CVE-2026-73424 json | Not Provided | 2026-08-17 | 2026-08-18 | |
| CVE-2026-73423 json | Not Provided | 2026-08-12 | 2026-08-13 | |
| CVE-2026-73422 json | Not Provided | 2026-08-12 | 2026-08-14 | |
| CVE-2026-59730 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-59729 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-59728 json | Not Provided | 2026-07-27 | 2026-07-28 | |
| CVE-2026-54299 json | Astro is a web framework. Prior to 6.4.6, Astro SSR apps with prerendered error pages (/404 or /500 using export const preren... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-54298 json | Astro is a web framework. Prior to 6.4.6, the spreadAttributes function in Astro's server-side rendering pipeline iterates ov... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-50146 json | Astro is a web framework. Prior to 6.3.3, when a component uses a client:* directive, Astro inserts named slot content into a... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-45028 json | Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity... | Not Provided | 2026-05-13 | 2026-05-14 |
| CVE-2026-41067 json | Astro is a web framework. Prior to 6.1.6, the defineScriptVars function in Astro's server-side rendering pipeline uses a case... | Not Provided | 2026-04-24 | 2026-04-27 |
| CVE-2025-66202 json | Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attack... | Not Provided | 2025-12-09 | 2026-10-07 |
| CVE-2025-65019 json | Astro is a web framework. Prior to version 5.15.9, when using Astro's Cloudflare adapter (@astrojs/cloudflare) with output: '... | Not Provided | 2025-11-19 | 2026-10-18 |
| CVE-2025-64765 json | Astro is a web framework. Prior to version 5.15.8, a mismatch exists between how Astro normalizes request paths for routing/r... | Not Provided | 2025-11-19 | 2026-10-18 |
| CVE-2025-64764 json | Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature i... | Not Provided | 2025-11-19 | 2026-10-18 |
| CVE-2025-64757 json | Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development s... | Not Provided | 2025-11-19 | 2026-10-18 |