Packages / astro / Security

LowVulnerabilityGHSA-7pw4-f3q4-r2p2Published 20 Jul 2026

Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands

Affected · astro

  • >= 3.10.0, < 7.0.4

Fixed in

7.0.4

npm install astro@7.0.4

  1. Not affected

    0.0.1 – 3.6.5

    368 releases

  2. Affected

    4.0.0 – 7.0.3

    327 releases

  3. Fixed

    7.0.4 – 7.4.1

    35 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.