Skip to content
OpenAdvisories

Product · withastro

astro

48 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-58179 Public exploit Scanner template

    Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint

    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optim…

    withastro astro @astrojs/cloudflare npm
  • Medium 5.5
    CVE-2025-54793 Public exploit Scanner template

    Astro: Duplicate trailing slash feature can lead to Open Redirects

    Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbit…

    withastro astro astro npm