CVE-2026-73423

Astro (web framework) vulnerability CVE-2026-73423 affects the composable astro/hono pipeline from versions 7.0.0–7.0.6. If actions() or pages() are mounted before middleware(), or if middleware() is omitted, security.checkOrigin is not enforced at dispatch sinks, allowing blind write‑only CSRF a...