Skip to content
OpenAdvisories

Vendor

withastro

49 known vulnerabilities.

Products

astro 48 @astrojs/cloudflare 1
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • High 7.2
    CVE-2025-59837

    astro allows bypass of image proxy domain validation leading to SSRF and potential XSS

    Astro is a web framework that includes an image proxy. In versions 5.13.4 and later before 5.13.10, the image proxy domain validation can be bypassed by using backslashes in the href parameter, allowing server-side requests to arbitrary URLs. This can lead to…

    withastro astro astro npm
  • Medium 6.5
    CVE-2025-61925

    Astro's `X-Forwarded-Host` is reflected with no validation

    Astro is a web framework. Prior to version 5.14.2, Astro reflects the value in `X-Forwarded-Host` in output when using `Astro.url` without any validation. It is common for web servers such as nginx to route requests via the `Host` header, and forward on other…

    withastro astro astro npm
  • High 7.2
    CVE-2025-58179 Public exploit Scanner template

    Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint

    Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optim…

    withastro astro @astrojs/cloudflare npm
  • Medium 6.9
    CVE-2025-55303 Scanner template

    Unauthorized third-party images in Astro’s _image endpoint

    Astro is a web framework for content-driven websites. In versions of astro before 5.13.2 and 4.16.18, the image optimization endpoint in projects deployed with on-demand rendering allows images from unauthorized third-party domains to be served. On-demand ren…

    withastro astro astro @astrojs/node npm
  • Medium 5.5
    CVE-2025-55207

    @astrojs/node's trailing slash handling causes open redirect issue

    Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astr…

    withastro astro @astrojs/node npm
  • Medium 5.5
    CVE-2025-54793 Public exploit Scanner template

    Astro: Duplicate trailing slash feature can lead to Open Redirects

    Astro is a web framework for content-driven websites. In versions 5.2.0 through 5.12.7, there is an Open Redirect vulnerability in the trailing slash redirection logic when handling paths with double slashes. This allows an attacker to redirect users to arbit…

    withastro astro astro npm
  • High 7.8
    CVE-2024-56159 Scanner template

    Server source code is exposed to the public if sourcemaps are enabled

    Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. During build, along with client assets such as css and font files, the sourcemap files **for the server c…

    withastro astro astro npm
  • Medium 5.9
    CVE-2024-56140

    Bypass of CSRF Middleware in Astro

    Astro is a web framework for content-driven websites. In affected versions a bug in Astro’s CSRF-protection middleware allows requests to bypass CSRF checks. When the `security.checkOrigin` configuration option is set to `true`, Astro middleware will perform …

    withastro astro astro npm
  • Medium 5.9
    CVE-2024-47885

    astro's client-side router has DOM Clobbering Gadget that leads to XSS

    The Astro web framework has a DOM Clobbering gadget in the client-side router starting in version 3.0.0 and prior to version 4.16.1. It can lead to cross-site scripting (XSS) in websites enables Astro's client-side routing and has *stored* attacker-controlled…

    withastro astro astro npm