CVE-2025-64745
1 advisory.
npm/astro CVE-2025-64745: low 2.7
Astro development server error page is vulnerable to reflected Cross-site Scripting
Action: Upgrade astro to 5.15.6 or later.
npm i astro@5.15.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.2.0 | 5.15.6 | - |
Fixed versions
| 5.15.6 |
Sources
- osv: GHSA-w2vj-39qv-7vh7
- https://github.com/withastro/astro/security/advisories/GHSA-w2vj-39qv-7vh7
- https://nvd.nist.gov/vuln/detail/CVE-2025-64745
- https://github.com/withastro/astro/pull/12994
- https://github.com/withastro/astro/commit/790d9425f39bbbb462f1c27615781cd965009f91
- https://github.com/withastro/astro
- https://github.com/withastro/astro/blob/5bc37fd5cade62f753aef66efdf40f982379029a/packages/astro/src/template/4xx.ts#L133-L149
CVE-2025-64745 · published · modified · JSON