Packages / astro / Security

ModerateVulnerabilityGHSA-4g3v-8h47-v7g6Published 20 Jul 2026

Astro: Reflected XSS via unescaped View Transition animation properties

Affected · astro

  • >= 2.9.0, < 7.1.0

Fixed in

7.1.0

npm install astro@7.1.0

  1. Not affected

    0.0.1 – 2.8.5

    296 releases

  2. Affected

    2.9.0 – 7.0.9

    405 releases

  3. Fixed

    7.1.0 – 7.4.1

    29 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.