Packages / astro / Security

ModerateVulnerabilityGHSA-whqg-ppgf-wp8cPublished 8 Dec 2025

Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765

Affected · astro

  • < 5.15.8

Fixed in

5.15.8

npm install astro@5.15.8

  1. Affected

    0.0.1 – 5.15.7

    624 releases

  2. Fixed

    5.15.8 – 7.4.1

    106 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.