EUVD-2026-42341

Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch...

PT-2026-56516

Name of the Vulnerable Software and Affected Versions Astro version 6.4.7 Description Astro performs authorization decisions on a partially decoded pathname after reaching the iterative URL decoder limit. Subsequently, rewrite route matching performs an additional decodeURI operation, which can...