Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-102984
  • github.com/withastro/astro
Astro: Malformed port in the Host header can crash the Node adapter 5 days ago
  • Fix available
  • Severity - 8.2 (High)
CVE-2026-102983
  • github.com/withastro/astro
Astro: Netlify Image CDN allowlist bypass enables SSRF 5 days ago
  • Fix available
  • Severity - 6.3 (Medium)
CLSA-2026-1790459384
  • TuxCare:npm/@astrojs/db
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/studio
  • ... 5 more
TuxCare security update for 10 packages (2 CVEs) 26 Sep
  • Fix available
CLSA-2026-1790457826
  • TuxCare:npm/@astrojs/db
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • ... 4 more
TuxCare security update for 9 packages (2 CVEs) 26 Sep
  • Fix available
CLSA-2026-1790185871
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/underscore-redirects
  • ... 3 more
TuxCare security update for 8 packages (2 CVEs) 23 Sep
  • Fix available
CLSA-2026-1790176521
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/underscore-redirects
  • ... 3 more
TuxCare security update for 8 packages (2 CVEs) 23 Sep
  • Fix available
CLSA-2026-1790175733
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/webapi
  • TuxCare:npm/astro
  • ... 1 more
TuxCare security update for 6 packages (1 CVE) 23 Sep
  • Fix available
CLSA-2026-1790106019
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/underscore-redirects
  • ... 3 more
TuxCare security update for 8 packages (3 CVEs) 22 Sep
  • Fix available
CLSA-2026-1790105671
  • TuxCare:npm/@astrojs/db
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/studio
  • ... 5 more
TuxCare security update for 10 packages (1 CVE) 22 Sep
  • Fix available
CLSA-2026-1790089283
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/underscore-redirects
  • ... 3 more
TuxCare security update for 8 packages (2 CVEs) 22 Sep
  • Fix available
CLSA-2026-1790089254
  • TuxCare:npm/@astrojs/db
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • ... 4 more
TuxCare security update for 9 packages (1 CVE) 22 Sep
  • Fix available
CLSA-2026-1789031241
  • TuxCare:npm/@astrojs/db
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • ... 4 more
TuxCare security update for 9 packages (1 CVE) 10 Sep
  • Fix available
CLSA-2026-1788970606
  • TuxCare:npm/@astrojs/internal-helpers
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/rss
  • TuxCare:npm/@astrojs/telemetry
  • TuxCare:npm/@astrojs/underscore-redirects
  • ... 3 more
TuxCare security update for 8 packages (1 CVE) 09 Sep
  • Fix available
GHSA-26w7-cxv4-gfx2
  • npm/astro
Astro: Remote code execution through AVIF image optimization 08 Sep
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-376h-93r7-7g6f
  • npm/astro
Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base 08 Sep
  • Fix available
  • Severity - 6.3 (Medium)
CLSA-2026-1788892753
  • TuxCare:npm/@astrojs/prism
  • TuxCare:npm/@astrojs/webapi
  • TuxCare:npm/astro
  • TuxCare:npm/create-astro
TuxCare security update for 4 packages (1 CVE) 08 Sep
  • Fix available