Packages / astro / Security

ModerateVulnerabilityGHSA-xf8x-j4p2-f749Published 19 Aug 2025

Astro allows unauthorized third-party images in _image endpoint

Affected · astro

  • >= 5.0.0-alpha.0, < 5.13.2
  • < 4.16.19

Fixed in

5.13.2

npm install astro@5.13.2

  1. Affected

    0.0.1 – 4.16.18

    512 releases

  2. Fixed

    4.16.19

    1 release

  3. Affected

    5.0.0 – 5.13.1

    85 releases

  4. Fixed

    5.13.2 – 7.4.1

    132 releases, latest

730 stable releases of astro, oldest to newest.

What happens

The full text is not stored yet. Read it on osv.dev.