Skip to content
OpenAdvisories

Vendor

withastro

44 known vulnerabilities.

Products

astro 43 @astrojs/cloudflare 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-58179 Public exploit

    Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint

    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optim…

    withastro astro @astrojs/cloudflare npm
  • Medium 5.5
    CVE-2025-54793 Public exploit

    Astro: Duplicate trailing slash feature can lead to Open Redirects

    Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbit…

    withastro astro astro npm