CVE-2026-126364

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-126364
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126364.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-126364
Aliases
Downstream
Published
2026-11-12T22:33:17Z
Modified
2026-11-14T02:47:27Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
Details

Astro is a web framework for content-driven websites. From 5.14.3 until 7.4.7, Astro's /_image endpoint compared the requested local-image path with the build output directory without preserving case on case-sensitive filesystems. A sibling directory whose path differed from the output directory only by letter case could therefore pass the containment check, allowing an unauthenticated requester to read image files accepted by the image service from outside the output directory. Exploitation required on-demand rendering with the @astrojs/node adapter, a case-sensitive filesystem, and a preexisting case-variant sibling directory; ordinary traversal to unrelated paths was already rejected. This issue is fixed in Astro version 7.4.7.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-178",
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126364.json"
}
References

Affected packages

Git / github.com/withastro/astro

Affected ranges

Type
GIT
Repo
https://github.com/withastro/astro
Events
Introduced
fe1d35cc950b16a6462102b98b48753d27395e03
Fixed
cd30ae26e00232cad5ae0ad485d0f7c1c257ab8c
Fixed
7da442bb286e0c29e1c9e1add6727b7cbf434f1a
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "5.14.3"
                },
                {
                    "fixed": "7.4.7"
                }
            ],
            "source": "AFFECTED_FIELD",
            "strategy": "StringRangeExpression"
        },
        {
            "range": [
                {
                    "fixed": "7da442bb286e0c29e1c9e1add6727b7cbf434f1a"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "astro@7.4.7",
            "range": [
                {
                    "fixed": "cd30ae26e00232cad5ae0ad485d0f7c1c257ab8c"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

@astrojs/alpinejs@0.*
@astrojs/alpinejs@0.5.0
@astrojs/alpinejs@1.*
@astrojs/alpinejs@1.0.0
@astrojs/check@0.*
@astrojs/check@0.9.10
@astrojs/check@0.9.11
@astrojs/check@0.9.12
@astrojs/check@0.9.6
@astrojs/check@0.9.7
@astrojs/check@0.9.8
@astrojs/check@0.9.9
@astrojs/cloudflare@12.*
@astrojs/cloudflare@12.6.10
@astrojs/cloudflare@12.6.11
@astrojs/cloudflare@12.6.12
@astrojs/cloudflare@13.*
@astrojs/cloudflare@13.0.0
@astrojs/cloudflare@13.0.0-beta.10
@astrojs/cloudflare@13.0.0-beta.11
@astrojs/cloudflare@13.0.0-beta.12
@astrojs/cloudflare@13.0.0-beta.13
@astrojs/cloudflare@13.0.0-beta.14
@astrojs/cloudflare@13.0.0-beta.4
@astrojs/cloudflare@13.0.0-beta.5
@astrojs/cloudflare@13.0.0-beta.6
@astrojs/cloudflare@13.0.0-beta.7
@astrojs/cloudflare@13.0.0-beta.8
@astrojs/cloudflare@13.0.0-beta.9
@astrojs/cloudflare@13.0.2
@astrojs/cloudflare@13.1.0
@astrojs/cloudflare@13.1.1
@astrojs/cloudflare@13.1.10
@astrojs/cloudflare@13.1.2
@astrojs/cloudflare@13.1.3
@astrojs/cloudflare@13.1.4
@astrojs/cloudflare@13.1.5
@astrojs/cloudflare@13.1.6
@astrojs/cloudflare@13.1.7
@astrojs/cloudflare@13.1.8
@astrojs/cloudflare@13.1.9
@astrojs/cloudflare@13.2.0
@astrojs/cloudflare@13.2.1
@astrojs/cloudflare@13.2.2
@astrojs/cloudflare@13.3.0
@astrojs/cloudflare@13.3.1
@astrojs/cloudflare@13.4.0
@astrojs/cloudflare@13.5.0
@astrojs/cloudflare@13.5.1
@astrojs/cloudflare@13.5.2
@astrojs/cloudflare@13.5.3
@astrojs/cloudflare@13.5.4
@astrojs/cloudflare@13.5.5
@astrojs/cloudflare@13.6.0
@astrojs/cloudflare@13.6.1
@astrojs/cloudflare@13.7.0
@astrojs/cloudflare@14.*
@astrojs/cloudflare@14.0.0
@astrojs/cloudflare@14.0.0-beta.3
@astrojs/cloudflare@14.0.1
@astrojs/cloudflare@14.0.2
@astrojs/cloudflare@14.1.0
@astrojs/cloudflare@14.1.1
@astrojs/cloudflare@14.1.2
@astrojs/cloudflare@14.1.3
@astrojs/cloudflare@14.1.4
@astrojs/cloudflare@14.1.5
@astrojs/cloudflare@14.1.6
@astrojs/cloudflare@14.1.7
@astrojs/cloudflare@14.2.0
@astrojs/cloudflare@14.2.1
@astrojs/cloudflare@14.2.2
@astrojs/cloudflare@14.2.3
@astrojs/cloudflare@14.2.4
@astrojs/cloudflare@14.2.5
@astrojs/cloudflare@14.2.6
@astrojs/cloudflare@14.3.0
@astrojs/cloudflare@14.3.1
@astrojs/cloudflare@14.3.2
@astrojs/cloudflare@14.3.3
@astrojs/cloudflare@14.3.4
@astrojs/cloudflare@14.4.0
@astrojs/cloudflare@14.4.1
@astrojs/cloudflare@14.4.2
@astrojs/cloudflare@14.4.3
@astrojs/cloudflare@14.4.4
@astrojs/cloudflare@14.4.5
@astrojs/db@0.*
@astrojs/db@0.18.1
@astrojs/db@0.18.2
@astrojs/db@0.18.3
@astrojs/db@0.19.0
@astrojs/db@0.19.0-beta.3
@astrojs/db@0.19.0-beta.4
@astrojs/db@0.20.0
@astrojs/db@0.20.1
@astrojs/db@0.21.0
@astrojs/db@0.21.1
@astrojs/db@0.21.2
@astrojs/db@0.21.3
@astrojs/internal-helpers@0.*
@astrojs/internal-helpers@0.10.0
@astrojs/internal-helpers@0.10.1
@astrojs/internal-helpers@0.10.2
@astrojs/internal-helpers@0.10.3
@astrojs/internal-helpers@0.10.4
@astrojs/internal-helpers@0.11.0
@astrojs/internal-helpers@0.12.0
@astrojs/internal-helpers@0.13.0
@astrojs/internal-helpers@0.7.4
@astrojs/internal-helpers@0.7.5
@astrojs/internal-helpers@0.8.0
@astrojs/internal-helpers@0.8.0-beta.0
@astrojs/internal-helpers@0.8.0-beta.1
@astrojs/internal-helpers@0.8.0-beta.2
@astrojs/internal-helpers@0.8.0-beta.3
@astrojs/internal-helpers@0.9.0
@astrojs/internal-helpers@0.9.1
@astrojs/language-server@2.*
@astrojs/language-server@2.16.0
@astrojs/language-server@2.16.1
@astrojs/language-server@2.16.10
@astrojs/language-server@2.16.11
@astrojs/language-server@2.16.12
@astrojs/language-server@2.16.13
@astrojs/language-server@2.16.14
@astrojs/language-server@2.16.15
@astrojs/language-server@2.16.16
@astrojs/language-server@2.16.2
@astrojs/language-server@2.16.3
@astrojs/language-server@2.16.5
@astrojs/language-server@2.16.6
@astrojs/language-server@2.16.7
@astrojs/language-server@2.16.8
@astrojs/language-server@2.16.9
@astrojs/language-server@2.17.0
@astrojs/language-server@2.17.1
@astrojs/language-server@2.17.2
@astrojs/language-server@2.17.3
@astrojs/markdoc@0.*
@astrojs/markdoc@0.15.10
@astrojs/markdoc@0.15.8
@astrojs/markdoc@0.15.9
@astrojs/markdoc@1.*
@astrojs/markdoc@1.0.0
@astrojs/markdoc@1.0.0-beta.10
@astrojs/markdoc@1.0.0-beta.11
@astrojs/markdoc@1.0.0-beta.12
@astrojs/markdoc@1.0.0-beta.13
@astrojs/markdoc@1.0.0-beta.14
@astrojs/markdoc@1.0.0-beta.15
@astrojs/markdoc@1.0.0-beta.7
@astrojs/markdoc@1.0.0-beta.8
@astrojs/markdoc@1.0.0-beta.9
@astrojs/markdoc@1.0.1
@astrojs/markdoc@1.0.2
@astrojs/markdoc@1.0.3
@astrojs/markdoc@1.0.4
@astrojs/markdoc@1.0.5
@astrojs/markdoc@1.0.6
@astrojs/markdoc@2.*
@astrojs/markdoc@2.0.0
@astrojs/markdoc@2.0.1
@astrojs/markdoc@2.0.10
@astrojs/markdoc@2.0.11
@astrojs/markdoc@2.0.2
@astrojs/markdoc@2.0.3
@astrojs/markdoc@2.0.4
@astrojs/markdoc@2.0.5
@astrojs/markdoc@2.0.6
@astrojs/markdoc@2.0.7
@astrojs/markdoc@2.0.8
@astrojs/markdoc@2.0.9
@astrojs/markdoc@2.1.0
@astrojs/markdoc@2.1.1
@astrojs/markdoc@2.1.2
@astrojs/markdown-remark@6.*
@astrojs/markdown-remark@6.3.10
@astrojs/markdown-remark@6.3.8
@astrojs/markdown-remark@6.3.9
@astrojs/markdown-remark@7.*
@astrojs/markdown-remark@7.0.0
@astrojs/markdown-remark@7.0.0-beta.10
@astrojs/markdown-remark@7.0.0-beta.11
@astrojs/markdown-remark@7.0.0-beta.4
@astrojs/markdown-remark@7.0.0-beta.5
@astrojs/markdown-remark@7.0.0-beta.6
@astrojs/markdown-remark@7.0.0-beta.7
@astrojs/markdown-remark@7.0.0-beta.8
@astrojs/markdown-remark@7.0.0-beta.9
@astrojs/markdown-remark@7.0.1
@astrojs/markdown-remark@7.1.0
@astrojs/markdown-remark@7.1.1
@astrojs/markdown-remark@7.1.2
@astrojs/markdown-remark@7.2.0
@astrojs/markdown-remark@7.2.1
@astrojs/markdown-remark@7.2.2
@astrojs/markdown-remark@7.2.3
@astrojs/markdown-remark@7.2.4
@astrojs/markdown-remark@7.3.0
@astrojs/markdown-remark@7.3.1
@astrojs/markdown-remark@7.3.2
@astrojs/markdown-remark@7.3.3
@astrojs/markdown-remark@7.3.4
@astrojs/markdown-remark@7.3.5
@astrojs/markdown-satteri@0.*
@astrojs/markdown-satteri@0.2.0
@astrojs/markdown-satteri@0.2.1
@astrojs/markdown-satteri@0.2.2
@astrojs/markdown-satteri@0.3.0
@astrojs/markdown-satteri@0.3.1
@astrojs/markdown-satteri@0.3.1-beta.2
@astrojs/markdown-satteri@0.3.2
@astrojs/markdown-satteri@0.3.3
@astrojs/markdown-satteri@0.3.4
@astrojs/markdown-satteri@0.3.5
@astrojs/markdown-satteri@0.3.6
@astrojs/markdown-satteri@0.3.7
@astrojs/markdown-satteri@0.3.8
@astrojs/markdown-satteri@0.4.0
@astrojs/markdown-satteri@0.4.1
@astrojs/markdown-satteri@0.4.2
@astrojs/markdown-satteri@0.4.3
@astrojs/markdown-satteri@0.4.4
@astrojs/markdown-satteri@0.4.5
@astrojs/markdown-satteri@0.4.6
@astrojs/mdx@4.*
@astrojs/mdx@4.3.10
@astrojs/mdx@4.3.11
@astrojs/mdx@4.3.12
@astrojs/mdx@4.3.13
@astrojs/mdx@4.3.7
@astrojs/mdx@4.3.9
@astrojs/mdx@5.*
@astrojs/mdx@5.0.0
@astrojs/mdx@5.0.0-beta.10
@astrojs/mdx@5.0.0-beta.11
@astrojs/mdx@5.0.0-beta.12
@astrojs/mdx@5.0.0-beta.4
@astrojs/mdx@5.0.0-beta.5
@astrojs/mdx@5.0.0-beta.6
@astrojs/mdx@5.0.0-beta.7
@astrojs/mdx@5.0.0-beta.8
@astrojs/mdx@5.0.0-beta.9
@astrojs/mdx@5.0.1
@astrojs/mdx@5.0.2
@astrojs/mdx@5.0.3
@astrojs/mdx@5.0.4
@astrojs/mdx@5.0.5
@astrojs/mdx@5.0.6
@astrojs/mdx@6.*
@astrojs/mdx@6.0.0
@astrojs/mdx@6.0.2
@astrojs/mdx@6.0.3
@astrojs/mdx@7.*
@astrojs/mdx@7.0.0
@astrojs/mdx@7.0.0-beta.3
@astrojs/mdx@7.0.0-beta.4
@astrojs/mdx@7.0.1
@astrojs/mdx@7.0.2
@astrojs/mdx@7.0.3
@astrojs/mdx@7.0.4
@astrojs/mdx@7.0.5
@astrojs/mdx@7.0.6
@astrojs/mdx@7.0.7
@astrojs/mdx@7.0.8
@astrojs/mdx@8.*
@astrojs/mdx@8.0.0
@astrojs/mdx@8.0.1
@astrojs/mdx@8.0.2
@astrojs/mdx@8.0.3
@astrojs/mdx@8.1.0
@astrojs/mdx@8.1.1
@astrojs/mdx@8.1.2
@astrojs/netlify@6.*
@astrojs/netlify@6.5.12
@astrojs/netlify@6.5.13
@astrojs/netlify@6.6.0
@astrojs/netlify@6.6.1
@astrojs/netlify@6.6.2
@astrojs/netlify@6.6.3
@astrojs/netlify@6.6.4
@astrojs/netlify@7.*
@astrojs/netlify@7.0.0
@astrojs/netlify@7.0.0-beta.10
@astrojs/netlify@7.0.0-beta.11
@astrojs/netlify@7.0.0-beta.12
@astrojs/netlify@7.0.0-beta.13
@astrojs/netlify@7.0.0-beta.14
@astrojs/netlify@7.0.0-beta.6
@astrojs/netlify@7.0.0-beta.7
@astrojs/netlify@7.0.0-beta.8
@astrojs/netlify@7.0.0-beta.9
@astrojs/netlify@7.0.10
@astrojs/netlify@7.0.11
@astrojs/netlify@7.0.12
@astrojs/netlify@7.0.13
@astrojs/netlify@7.0.2
@astrojs/netlify@7.0.3
@astrojs/netlify@7.0.4
@astrojs/netlify@7.0.5
@astrojs/netlify@7.0.6
@astrojs/netlify@7.0.7
@astrojs/netlify@7.0.8
@astrojs/netlify@7.0.9
@astrojs/netlify@8.*
@astrojs/netlify@8.0.0
@astrojs/netlify@8.1.0
@astrojs/netlify@8.1.1
@astrojs/netlify@8.1.2
@astrojs/netlify@8.1.3
@astrojs/netlify@8.2.0
@astrojs/netlify@8.2.1
@astrojs/netlify@8.2.10
@astrojs/netlify@8.2.11
@astrojs/netlify@8.2.2
@astrojs/netlify@8.2.3
@astrojs/netlify@8.2.4
@astrojs/netlify@8.2.5
@astrojs/netlify@8.2.6
@astrojs/netlify@8.2.7
@astrojs/netlify@8.2.8
@astrojs/netlify@8.2.9
@astrojs/node@10.*
@astrojs/node@10.0.0
@astrojs/node@10.0.0-beta.1
@astrojs/node@10.0.0-beta.2
@astrojs/node@10.0.0-beta.3
@astrojs/node@10.0.0-beta.4
@astrojs/node@10.0.0-beta.5
@astrojs/node@10.0.0-beta.6
@astrojs/node@10.0.0-beta.7
@astrojs/node@10.0.0-beta.8
@astrojs/node@10.0.0-beta.9
@astrojs/node@10.0.1
@astrojs/node@10.0.2
@astrojs/node@10.0.3
@astrojs/node@10.0.4
@astrojs/node@10.0.5
@astrojs/node@10.0.6
@astrojs/node@10.1.0
@astrojs/node@10.1.1
@astrojs/node@10.1.2
@astrojs/node@10.1.3
@astrojs/node@10.1.4
@astrojs/node@11.*
@astrojs/node@11.0.0
@astrojs/node@11.0.0-beta.2
@astrojs/node@11.0.1
@astrojs/node@11.0.2
@astrojs/node@11.0.3
@astrojs/node@11.1.0
@astrojs/node@11.1.1
@astrojs/node@11.1.10
@astrojs/node@11.1.2
@astrojs/node@11.1.3
@astrojs/node@11.1.4
@astrojs/node@11.1.5
@astrojs/node@11.1.6
@astrojs/node@11.1.7
@astrojs/node@11.1.8
@astrojs/node@11.1.9
@astrojs/node@9.*
@astrojs/node@9.4.5
@astrojs/node@9.4.6
@astrojs/node@9.5.0
@astrojs/node@9.5.1
@astrojs/node@9.5.2
@astrojs/partytown@2.*
@astrojs/partytown@2.1.5
@astrojs/partytown@2.1.6
@astrojs/partytown@2.1.7
@astrojs/partytown@2.1.8
@astrojs/partytown@2.1.9
@astrojs/preact@4.*
@astrojs/preact@4.1.2
@astrojs/preact@4.1.3
@astrojs/preact@5.*
@astrojs/preact@5.0.0
@astrojs/preact@5.0.0-beta.3
@astrojs/preact@5.0.0-beta.4
@astrojs/preact@5.0.0-beta.5
@astrojs/preact@5.0.1
@astrojs/preact@5.0.2
@astrojs/preact@5.1.0
@astrojs/preact@5.1.1
@astrojs/preact@5.1.2
@astrojs/preact@5.1.3
@astrojs/preact@5.1.4
@astrojs/preact@5.1.5
@astrojs/preact@6.*
@astrojs/preact@6.0.0
@astrojs/preact@6.0.0-beta.2
@astrojs/preact@6.0.1
@astrojs/preact@6.0.2
@astrojs/preact@6.0.3
@astrojs/preact@6.0.4
@astrojs/preact@6.0.5
@astrojs/preact@6.0.6
@astrojs/preact@6.1.0
@astrojs/preact@6.1.1
@astrojs/prism@4.*
@astrojs/prism@4.0.0
@astrojs/prism@4.0.1
@astrojs/prism@4.0.2
@astrojs/prism@4.1.0
@astrojs/prism@4.1.1
@astrojs/prism@4.1.2
@astrojs/react@4.*
@astrojs/react@4.4.1
@astrojs/react@4.4.2
@astrojs/react@5.*
@astrojs/react@5.0.0
@astrojs/react@5.0.0-beta.4
@astrojs/react@5.0.1
@astrojs/react@5.0.2
@astrojs/react@5.0.3
@astrojs/react@5.0.4
@astrojs/react@5.0.5
@astrojs/react@5.0.6
@astrojs/react@5.0.7
@astrojs/react@6.*
@astrojs/react@6.0.0
@astrojs/react@6.0.0-beta.2
@astrojs/react@6.0.1
@astrojs/react@6.0.2
@astrojs/react@6.0.3
@astrojs/react@6.0.4
@astrojs/react@6.0.5
@astrojs/react@6.0.6
@astrojs/react@7.*
@astrojs/react@7.0.0
@astrojs/react@7.0.1
@astrojs/react@7.1.0
@astrojs/react@7.1.1
@astrojs/react@7.1.2
@astrojs/react@7.1.3
@astrojs/rss@4.*
@astrojs/rss@4.0.13
@astrojs/rss@4.0.14
@astrojs/rss@4.0.15
@astrojs/rss@4.0.15-beta.3
@astrojs/rss@4.0.15-beta.4
@astrojs/rss@4.0.16
@astrojs/rss@4.0.17
@astrojs/rss@4.0.18
@astrojs/rss@4.0.19
@astrojs/sitemap@3.*
@astrojs/sitemap@3.6.1
@astrojs/sitemap@3.6.1-beta.3
@astrojs/sitemap@3.7.0
@astrojs/sitemap@3.7.1
@astrojs/sitemap@3.7.2
@astrojs/sitemap@3.7.3
@astrojs/sitemap@3.7.4
@astrojs/solid-js@5.*
@astrojs/solid-js@5.1.2
@astrojs/solid-js@5.1.3
@astrojs/solid-js@6.*
@astrojs/solid-js@6.0.0
@astrojs/solid-js@6.0.1
@astrojs/solid-js@7.*
@astrojs/solid-js@7.0.0
@astrojs/solid-js@7.0.0-beta.2
@astrojs/solid-js@7.0.1
@astrojs/solid-js@7.0.2
@astrojs/solid-js@7.1.0
@astrojs/solid-js@7.1.1
@astrojs/solid-js@7.1.2
@astrojs/svelte@7.*
@astrojs/svelte@7.2.1
@astrojs/svelte@7.2.2
@astrojs/svelte@7.2.3
@astrojs/svelte@7.2.4
@astrojs/svelte@7.2.5
@astrojs/svelte@8.*
@astrojs/svelte@8.0.0
@astrojs/svelte@8.0.0-beta.3
@astrojs/svelte@8.0.1
@astrojs/svelte@8.0.2
@astrojs/svelte@8.0.3
@astrojs/svelte@8.0.4
@astrojs/svelte@8.0.5
@astrojs/svelte@8.1.0
@astrojs/svelte@8.1.1
@astrojs/svelte@8.1.2
@astrojs/svelte@9.*
@astrojs/svelte@9.0.0
@astrojs/svelte@9.0.0-beta.4
@astrojs/svelte@9.0.1
@astrojs/svelte@9.1.0
@astrojs/svelte@9.1.1
@astrojs/svelte@9.1.2
@astrojs/telemetry@3.*
@astrojs/telemetry@3.3.1
@astrojs/telemetry@3.3.2
@astrojs/telemetry@3.3.3
@astrojs/telemetry@3.4.0
@astrojs/telemetry@3.4.1
@astrojs/telemetry@3.4.2
@astrojs/ts-content-mapper@0.*
@astrojs/ts-content-mapper@0.2.0
@astrojs/ts-plugin@1.*
@astrojs/ts-plugin@1.10.10
@astrojs/ts-plugin@1.10.11
@astrojs/ts-plugin@1.10.12
@astrojs/ts-plugin@1.10.6
@astrojs/ts-plugin@1.10.8
@astrojs/ts-plugin@1.10.9
@astrojs/underscore-redirects@1.*
@astrojs/underscore-redirects@1.0.2
@astrojs/underscore-redirects@1.0.3
@astrojs/underscore-redirects@1.0.4
@astrojs/upgrade@0.*
@astrojs/upgrade@0.7.0
@astrojs/upgrade@0.7.1
@astrojs/upgrade@0.7.2
@astrojs/upgrade@0.7.3
@astrojs/upgrade@0.7.4
@astrojs/upgrade@0.7.5
@astrojs/upgrade@0.8.0
@astrojs/upgrade@0.8.1
@astrojs/vercel@10.*
@astrojs/vercel@10.0.0
@astrojs/vercel@10.0.0-beta.1
@astrojs/vercel@10.0.0-beta.2
@astrojs/vercel@10.0.0-beta.3
@astrojs/vercel@10.0.0-beta.4
@astrojs/vercel@10.0.0-beta.5
@astrojs/vercel@10.0.0-beta.6
@astrojs/vercel@10.0.0-beta.7
@astrojs/vercel@10.0.0-beta.8
@astrojs/vercel@10.0.1
@astrojs/vercel@10.0.2
@astrojs/vercel@10.0.3
@astrojs/vercel@10.0.4
@astrojs/vercel@10.0.5
@astrojs/vercel@10.0.6
@astrojs/vercel@10.0.7
@astrojs/vercel@10.0.8
@astrojs/vercel@11.*
@astrojs/vercel@11.0.0
@astrojs/vercel@11.0.1
@astrojs/vercel@11.0.10
@astrojs/vercel@11.0.11
@astrojs/vercel@11.0.12
@astrojs/vercel@11.0.13
@astrojs/vercel@11.0.14
@astrojs/vercel@11.0.15
@astrojs/vercel@11.0.16
@astrojs/vercel@11.0.17
@astrojs/vercel@11.0.18
@astrojs/vercel@11.0.19
@astrojs/vercel@11.0.2
@astrojs/vercel@11.0.3
@astrojs/vercel@11.0.4
@astrojs/vercel@11.0.5
@astrojs/vercel@11.0.6
@astrojs/vercel@11.0.7
@astrojs/vercel@11.0.8
@astrojs/vercel@11.0.9
@astrojs/vercel@8.*
@astrojs/vercel@8.2.10
@astrojs/vercel@8.2.11
@astrojs/vercel@8.2.9
@astrojs/vercel@9.*
@astrojs/vercel@9.0.1
@astrojs/vercel@9.0.2
@astrojs/vercel@9.0.3
@astrojs/vercel@9.0.4
@astrojs/vue@5.*
@astrojs/vue@5.1.2
@astrojs/vue@5.1.3
@astrojs/vue@5.1.4
@astrojs/vue@6.*
@astrojs/vue@6.0.0
@astrojs/vue@6.0.0-beta.1
@astrojs/vue@6.0.1
@astrojs/vue@7.*
@astrojs/vue@7.0.0
@astrojs/vue@7.0.0-beta.2
@astrojs/vue@7.0.1
@astrojs/vue@7.0.2
@astrojs/vue@7.0.3
@astrojs/vue@7.1.0
@astrojs/vue@7.1.1
@astrojs/vue@7.1.2
@astrojs/yaml2ts@0.*
@astrojs/yaml2ts@0.2.4
astro-vscode@2.*
astro-vscode@2.16.0
astro-vscode@2.16.1
astro-vscode@2.16.11
astro-vscode@2.16.12
astro-vscode@2.16.13
astro-vscode@2.16.14
astro-vscode@2.16.15
astro-vscode@2.16.16
astro-vscode@2.16.17
astro-vscode@2.16.18
astro-vscode@2.16.19
astro-vscode@2.16.2
astro-vscode@2.16.20
astro-vscode@2.16.3
astro-vscode@2.16.4
astro-vscode@2.16.5
astro-vscode@2.16.6
astro-vscode@2.16.7
astro-vscode@2.16.8
astro-vscode@2.16.9
astro-vscode@2.16.9-beta.0
astro-vscode@2.17.0
astro-vscode@2.17.1
astro-vscode@2.17.2
astro@5.*
astro@5.14.3
astro@5.14.4
astro@5.14.5
astro@5.14.6
astro@5.14.7
astro@5.14.8
astro@5.15.0
astro@5.15.1
astro@5.15.2
astro@5.15.3
astro@5.15.4
astro@5.15.5
astro@5.15.6
astro@5.15.7
astro@5.15.8
astro@5.15.9
astro@5.16.0
astro@5.16.1
astro@5.16.10
astro@5.16.11
astro@5.16.12
astro@5.16.13
astro@5.16.14
astro@5.16.15
astro@5.16.16
astro@5.16.2
astro@5.16.3
astro@5.16.4
astro@5.16.5
astro@5.16.6
astro@5.16.7
astro@5.16.8
astro@5.16.9
astro@5.17.0
astro@5.17.1
astro@6.*
astro@6.0.0
astro@6.0.0-beta.10
astro@6.0.0-beta.11
astro@6.0.0-beta.12
astro@6.0.0-beta.13
astro@6.0.0-beta.14
astro@6.0.0-beta.15
astro@6.0.0-beta.16
astro@6.0.0-beta.17
astro@6.0.0-beta.18
astro@6.0.0-beta.19
astro@6.0.0-beta.20
astro@6.0.0-beta.7
astro@6.0.0-beta.8
astro@6.0.0-beta.9
astro@6.0.1
astro@6.0.2
astro@6.0.3
astro@6.0.4
astro@6.0.5
astro@6.0.6
astro@6.0.7
astro@6.0.8
astro@6.1.0
astro@6.1.1
astro@6.1.10
astro@6.1.2
astro@6.1.3
astro@6.1.4
astro@6.1.5
astro@6.1.6
astro@6.1.7
astro@6.1.8
astro@6.1.9
astro@6.2.0
astro@6.2.1
astro@6.2.2
astro@6.3.0
astro@6.3.1
astro@6.3.2
astro@6.3.3
astro@6.3.4
astro@6.3.5
astro@6.3.6
astro@6.3.7
astro@6.3.8
astro@6.4.0
astro@6.4.2
astro@6.4.3
astro@6.4.4
astro@6.4.5
astro@6.4.6
astro@6.4.7
astro@7.*
astro@7.0.0
astro@7.0.0-beta.4
astro@7.0.0-beta.5
astro@7.0.0-beta.6
astro@7.0.1
astro@7.0.2
astro@7.0.3
astro@7.0.4
astro@7.0.5
astro@7.0.6
astro@7.0.7
astro@7.0.8
astro@7.0.9
astro@7.1.0
astro@7.1.1
astro@7.1.2
astro@7.1.3
astro@7.1.4
astro@7.1.5
astro@7.1.6
astro@7.2.0
astro@7.2.1
astro@7.2.10
astro@7.2.2
astro@7.2.3
astro@7.2.4
astro@7.2.5
astro@7.2.6
astro@7.2.7
astro@7.2.8
astro@7.2.9
astro@7.3.0
astro@7.3.1
astro@7.3.2
astro@7.3.3
astro@7.3.4
astro@7.3.5
astro@7.3.6
astro@7.3.7
astro@7.3.8
astro@7.4.0
astro@7.4.1
astro@7.4.2
astro@7.4.3
astro@7.4.4
astro@7.4.5
astro@7.4.6
create-astro@4.*
create-astro@4.13.2
create-astro@5.*
create-astro@5.0.0
create-astro@5.0.0-beta.3
create-astro@5.0.0-beta.4
create-astro@5.0.1
create-astro@5.0.2
create-astro@5.0.3
create-astro@5.0.4
create-astro@5.0.5
create-astro@5.0.6
create-astro@5.1.0
create-astro@5.1.0-beta.0
create-astro@5.2.0
create-astro@5.2.1
create-astro@5.2.2
create-astro@5.2.3
create-astro@5.2.4
create-astro@5.2.5
create-astro@5.2.6
create-astro@5.3.0
create-astro@5.3.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126364.json"