Packages / astro / Security

ModerateVulnerabilityGHSA-m85w-3h95-hcf9Published 14 Oct 2024

DOM Clobbering Gadget found in astro's client-side router that leads to XSS

Affected · astro

  • >= 3.0.0, < 4.16.1

Fixed in

4.16.1

npm install astro@4.16.1

  1. Not affected

    0.0.1 – 2.10.15

    320 releases

  2. Affected

    3.0.0 – 4.16.0

    174 releases

  3. Fixed

    4.16.1 – 7.4.1

    236 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.