Skip to content
OpenAdvisories

Vendor

@astrojs

1 known vulnerabilities.

Products

netlify 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-102983

    Astro: Netlify Image CDN allowlist bypass enables SSRF

    Astro is a web framework for content-driven websites. From 5.2.0 until 8.2.4, the @astrojs/netlify adapter generates regular expressions for Netlify Image CDN remote-image allowlists without anchoring them to the beginning of the URL. Because Netlify evaluate…

    withastro @astrojs astro netlify npm