Packages / astro / Security

HighVulnerabilityGHSA-49w6-73cw-chjrPublished 19 Dec 2024

Astro's server source code is exposed to the public if sourcemaps are enabled

Affected · astro

  • >= 5.0.0-alpha.0, < 5.0.8
  • < 4.16.18

Fixed in

5.0.8

npm install astro@5.0.8

  1. Affected

    0.0.1 – 4.16.17

    511 releases

  2. Fixed

    4.16.18 – 4.16.19

    2 releases

  3. Affected

    5.0.0 – 5.0.7

    8 releases

  4. Fixed

    5.0.8 – 7.4.1

    209 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.