Packages / astro / Security

ModerateVulnerabilityGHSA-376h-93r7-7g6fPublished 8 Sept 2026

Astro: Authorization bypass from missing path-segment boundary check when stripping the configured base

Affected · astro

  • < 7.2.4

Fixed in

7.2.4

npm install astro@7.2.4

  1. Affected

    0.0.1 – 7.2.3

    712 releases

  2. Fixed

    7.2.4 – 7.4.1

    18 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.