Skip to content
OpenAdvisories

Package · npm

astro

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    GHSA-26w7-cxv4-gfx2

    Astro: Remote code execution through AVIF image optimization

    A vulnerability in `libheif`, used by the default Sharp image service in Astro, can lead to remote code execution when a malicious AVIF image is optimized. Projects are affected when an attacker can cause Astro to process an untrusted AVIF image. The fix was …

    astro npm