693 matches found
@astrojs/node's trailing slash handling causes open redirect issue
Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...
GHSA-9X9C-GHC5-JHW9 @astrojs/node's trailing slash handling causes open redirect issue
Summary Following https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw, there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios. Details Astro 5.12.8 fixed a case where https://example.com//astro.build/press would redirect to the external origi...
CVE-2025-55207
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207 @astrojs/node's trailing slash handling causes open redirect issue
Astro is a web framework for content-driven websites. Following CVE-2025-54793 there's still an Open Redirect vulnerability in a subset of Astro deployment scenarios prior to version 9.4.1. Astro 5.12.8 addressed CVE-2025-54793 where https://example.com//astro.build/press would redirect to the...
CVE-2025-55207
Astro CVE-2025-55207 describes an Open Redirect vulnerability in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone mode with trailingSlash set to "always", URLs like https://example.com//astro.build/press can redirect to //astro.build/press, en...
Astro 输入验证错误漏洞
Astro is an Astro open source web framework for content-driven websites. An input validation error vulnerability exists in Astro versions prior to 9.4.1, which stems from a flaw in the redirection feature that could lead to an open redirection attack...
PT-2025-33494 · Astro · Astro
Name of the Vulnerable Software and Affected Versions: Astro versions prior to 9.4.1 Description: Astro is a web framework for content-driven websites. An open redirect vulnerability exists in certain Astro deployment scenarios. Specifically, when using the Node deployment adapter in standalone...
Malicious code in astro-publish-sedna-indus (npm)
The package astro-publish-sedna-indus was found to contain malicious code...
Malicious code in auth0-apollo-astro-eclipse (npm)
The package auth0-apollo-astro-eclipse was found to contain malicious code...
Malicious code in astro-xenon-restart-capella (npm)
The package astro-xenon-restart-capella was found to contain malicious code...
Malicious code in planetology-indus-webdriver-mocha-astro (npm)
The package planetology-indus-webdriver-mocha-astro was found to contain malicious code...
Malicious code in envconfig-deimos-astro-test (npm)
The package envconfig-deimos-astro-test was found to contain malicious code...
Malicious code in astro-neptune-ariel-antimatter (npm)
The package astro-neptune-ariel-antimatter was found to contain malicious code...
MAL-2025-14970 Malicious code in astro-postgres-init-oauth (npm)
The package astro-postgres-init-oauth was found to contain malicious code...
MAL-2025-14971 Malicious code in astro-publish-sedna-indus (npm)
The package astro-publish-sedna-indus was found to contain malicious code...
MAL-2025-31088 Malicious code in quantum-ignite-astro-cassini (npm)
The package quantum-ignite-astro-cassini was found to contain malicious code...