Packages / astro / Security

ModerateVulnerabilityGHSA-cq8c-xv66-36gwPublished 7 Aug 2025

Astros's duplicate trailing slash feature leads to an open redirection security issue

Affected · astro

  • >= 5.2.0, < 5.12.8

Fixed in

5.12.8

npm install astro@5.12.8

  1. Not affected

    0.0.1 – 5.1.10

    534 releases

  2. Affected

    5.2.0 – 5.12.7

    60 releases

  3. Fixed

    5.12.8 – 7.4.1

    136 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.