EUVD-2025-201717

Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated attacker to bypass path-based authentication checks in Astro middleware, granting unauthorized access to protected routes. While the original CVE-2025-64765 was fixed in v5.15.8,...

CVE-2025-64765

creationtimestamp| type| source ---|---|--- 2025-11-19 17:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yrmmzwoa2s...