CVE-2026-41322

🗓️ 24 Apr 2026 17:08:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 14 Views🌐 WEB

Cache poisoning in astrojs/node due to malformed if-match header; fixed in 10.0.5.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-41322	24 Apr 202617:08	–	attackerkb
Circl	CVE-2026-41322	20 Apr 202612:11	–	circl
CNNVD	Astro 安全漏洞	24 Apr 202600:00	–	cnnvd
Cvelist	CVE-2026-41322 @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed	24 Apr 202617:08	–	cvelist
EUVD	EUVD-2026-25580	24 Apr 202617:08	–	euvd
Github Security Blog	Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed	23 Apr 202614:36	–	github
NVD	CVE-2026-41322	24 Apr 202618:16	–	nvd
OSV	CVE-2026-41322 @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed	24 Apr 202617:08	–	osv
OSV	GHSA-C57F-MM3J-27Q9 Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed	23 Apr 202614:36	–	osv
Positive Technologies	PT-2026-34681	23 Apr 202600:00	–	ptsecurity

Vulners

Node

withastro astroRange<10.0.5

[
  {
    "vendor": "withastro",
    "product": "astro",
    "versions": [
      {
        "version": "< 10.0.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/withastro/astro/security/advisories/GHSA-c57f-mm3j-27q9

Parameter	Position	Path	Description	CWE
If-Match	header	_astro	Incorrect handling of the If-Match header for static resources under the _astro path can cause 5xx errors and prolonged caching, delaying legitimate file delivery.	CWE-525

17 Jun 2026 10:46Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

EPSS0.00238

SSVC

CWE-525