CVE-2026-126364

The Astro web framework (versions 5.14.3 through 7.4.7) contains a vulnerability in the /_image endpoint of the @astrojs/node adapter. The issue stems from a failure to preserve case sensitivity when comparing requested local-image paths against the build output directory on case-sensitive filesy...