npm/astro: critical 9.8
Astro: Remote code execution through AVIF image optimization
Action: Upgrade astro to 7.2.8 or later.
npm i astro@7.2.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.2.8 | - |
Fixed versions
| 7.2.8 |
Sources
- osv: GHSA-26w7-cxv4-gfx2
- https://github.com/strukturag/libheif/security/advisories/GHSA-g89c-p67h-r497
- https://github.com/withastro/astro/security/advisories/GHSA-26w7-cxv4-gfx2
- https://github.com/withastro/astro/commit/ecb4082131490b4fe9a56aa44fda84b54ef8967b
- https://github.com/withastro/astro
- https://github.com/withastro/astro/releases/tag/astro@7.2.8
published · modified · JSON