Packages / astro / Security

ModerateVulnerabilityGHSA-5ff5-9fcw-vg88Published 10 Oct 2025

Astro's `X-Forwarded-Host` is reflected without validation

Affected · astro

  • < 5.14.3

Fixed in

5.14.3

npm install astro@5.14.3

  1. Affected

    0.0.1 – 5.14.1

    610 releases

  2. Fixed

    5.14.3 – 7.4.1

    120 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.