Packages / astro / Security

ModerateVulnerabilityGHSA-j687-52p2-xcffPublished 21 Apr 2026

Astro: XSS in define:vars via incomplete </script> tag sanitization

Affected · astro

  • < 6.1.6

Fixed in

6.1.6

npm install astro@6.1.6

  1. Affected

    0.0.1 – 6.1.5

    665 releases

  2. Fixed

    6.1.6 – 7.4.1

    65 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.