npm/astro CVE-2025-54793: medium 6.1, EPSS 0.70%
Astros's duplicate trailing slash feature leads to an open redirection security issue
Action: Upgrade astro to 5.12.8 or later.
npm i astro@5.12.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.12.8 | - |
Fixed versions
| 5.12.8 |
Sources
- osv: GHSA-cq8c-xv66-36gw
- nvd: CVE-2025-54793
- https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw
- https://github.com/withastro/astro/commit/0567fb7b50c0c452be387dd7c7264b96bedab48f
- https://github.com/withastro/astro
CVE-2025-54793 · published · modified · JSON