CVE-2026-59730 @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

Astro is a web framework for content-driven websites. In versions 8.1.0 through 11.0.1, when trailingSlash: 'always' is configured, the @astrojs/node standalone server's static file handler appends a trailing slash to request paths and issues a 301 redirect. Paths beginning with /\ slash-backslas...

@0xbigboss/starlight-llms-txt (>=0.8.0-beta.1, <=0.8.0-beta.2), @1771technologies/lytenyte-doc (1.0.13) +750 more potentially affected by CVE-2026-59730 via @astrojs/internal-helpers (>=0.3.0, <=0.10.0)

@astrojs/internal-helpers NPM version =0.3.0, =0.8.0-beta.1, =0.0.1, =1.0.0, =0.0.3, =0.2.0, =1.1.0, =1.0.0, =0.4.2, =0.9.0, =0.1.6, =1.0.1, =1.0.3 and more Source cves: CVE-2026-59730 Source advisory: SNYK:JS-ASTROJSINTERNALHELPERS-18085626...