CVE-2025-61925
1 advisory.
npm/astro CVE-2025-61925: medium 6.5
Astro's `X-Forwarded-Host` is reflected without validation
Action: Upgrade astro to 5.14.3 or later.
npm i astro@5.14.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.14.3 | - |
Fixed versions
| 5.14.3 |
Sources
- osv: GHSA-5ff5-9fcw-vg88
- https://github.com/withastro/astro/security/advisories/GHSA-5ff5-9fcw-vg88
- https://nvd.nist.gov/vuln/detail/CVE-2025-61925
- https://github.com/withastro/astro/commit/6ee63bfac4856f21b4d4633021b3d2ee059e553f
- https://github.com/Chisnet/minimal_dynamic_astro_server
- https://github.com/withastro/astro
CVE-2025-61925 · published · modified · JSON