Packages / astro / Security

LowVulnerabilityGHSA-w2vj-39qv-7vh7Published 13 Nov 2025

Astro development server error page is vulnerable to reflected Cross-site Scripting

Affected · astro

  • >= 5.2.0, < 5.15.6

Fixed in

5.15.6

npm install astro@5.15.6

  1. Not affected

    0.0.1 – 5.1.10

    534 releases

  2. Affected

    5.2.0 – 5.15.5

    88 releases

  3. Fixed

    5.15.6 – 7.4.1

    108 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.