Packages / astro / Security

CriticalVulnerabilityGHSA-26w7-cxv4-gfx2Published 8 Sept 2026

Astro: Remote code execution through AVIF image optimization

Affected · astro

  • < 7.2.8

Fixed in

7.2.8

npm install astro@7.2.8

  1. Affected

    0.0.1 – 7.2.7

    716 releases

  2. Fixed

    7.2.8 – 7.4.1

    14 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.