Packages / astro / Security

HighVulnerabilityGHSA-vj59-8hwv-xxmvPublished 20 Jul 2026

Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch

Affected · astro

  • >= 6.4.7, < 6.4.8

Fixed in

6.4.8

npm install astro@6.4.8

  1. Not affected

    0.0.1 – 6.4.6

    689 releases

  2. Affected

    6.4.7

    1 release

  3. Fixed

    6.4.8 – 7.4.1

    40 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.