CVE-2024-56159
1 advisory.
npm/astro CVE-2024-56159: high
Astro's server source code is exposed to the public if sourcemaps are enabled
Action: Upgrade astro to 4.16.18 or later.
npm i astro@5.0.8npm i astro@4.16.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0-alpha.0 | 5.0.8 | - |
| 0 | 4.16.18 | - |
Fixed versions
| 5.0.8 | 4.16.18 |
Sources
- osv: GHSA-49w6-73cw-chjr
- https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr
- https://nvd.nist.gov/vuln/detail/CVE-2024-56159
- https://github.com/withastro/astro/issues/12703
- https://github.com/withastro/astro/commit/039d022b1bbaacf9ea83071d27affc5318e0e515
- https://github.com/withastro/astro/commit/c879f501ff01b1a3c577de776a1f7100d78f8dd5
- https://github.com/getsentry/sentry-javascript/blob/develop/packages/astro/src/integration/index.ts#L50
- https://github.com/withastro/astro
- https://github.com/withastro/astro/blob/176fe9f113fd912f9b61e848b00bbcfecd6d5c2c/packages/astro/src/core/build/static-build.ts#L139
CVE-2024-56159 · published · modified · JSON