withastro/astro Security Advisories | GitStock

medium2025-08-15

@astrojs/node's trailing slash handling causes open redirect issue

GHSA-9x9c-ghc5-jhw9 · CVE-2025-55207

medium2025-08-07

Astros's duplicate trailing slash feature leads to an open redirection security issue

GHSA-cq8c-xv66-36gw · CVE-2025-54793

high2024-12-19

Astro's server source code is exposed to the public if sourcemaps are enabled

GHSA-49w6-73cw-chjr · CVE-2024-56159

medium2024-12-18

Atro CSRF Middleware Bypass (security.checkOrigin)

GHSA-c4pw-33h3-35xw · CVE-2024-56140

medium2024-10-14

DOM Clobbering Gadget found in astro's client-side router that leads to XSS

GHSA-m85w-3h95-hcf9 · CVE-2024-47885