EUVD-2026-107409

Astro: Arbitrary CSS injection in Astro View Transitions...

CVE-2026-114127

Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application that passes attacker-controlled data into properties such as duration, dela...