Packages / astro / Security

HighVulnerabilityGHSA-8hv8-536x-4wqpPublished 16 Jun 2026

Astro: Reflected XSS via unescaped slot name

Affected · astro

  • < 6.3.3

Fixed in

6.3.3

npm install astro@6.3.3

  1. Affected

    0.0.1 – 6.3.2

    676 releases

  2. Fixed

    6.3.3 – 7.4.1

    54 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.