High
CVE-2026-102984
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filters
Low
CVE-2026-59730
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
Medium
CVE-2026-73422
Astro: Reflected XSS via unescaped View Transition animation properties
High
CVE-2026-54299
Astro: Host header SSRF in prerendered error page fetch
High
CVE-2026-50146
Astro: Reflected XSS via unescaped slot name
Medium
CVE-2026-41322
Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed
Low
CVE-2026-33769
Astro: Remote allowlist bypass via unanchored matchPathname wildcard
Medium
CVE-2026-29772
Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands
Medium
CVE-2026-27729
Astro has memory exhaustion DoS due to missing request body size limit in Server Actions
Medium
CVE-2026-27829
Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
Medium
CVE-2026-25545
Astro has Full-Read SSRF in error rendering via Host: header injection
Medium
CVE-2025-55303
Astro allows unauthorized third-party images in _image endpoint
Medium
CVE-2025-55207
@astrojs/node's trailing slash handling causes open redirect issue
Medium
CVE-2024-56140
Atro CSRF Middleware Bypass (security.checkOrigin)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.