CVE-2026-59731
1 advisory.
npm/astro CVE-2026-59731: high 8.2, EPSS 0.47%
Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch
Action: Upgrade astro to 6.4.8 or later.
npm i astro@6.4.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.4.7 | 6.4.8 | - |
Fixed versions
| 6.4.8 |
Sources
- osv: GHSA-vj59-8hwv-xxmv
- https://github.com/withastro/astro/security/advisories/GHSA-vj59-8hwv-xxmv
- https://nvd.nist.gov/vuln/detail/CVE-2026-59731
- https://github.com/withastro/astro/pull/17109
- https://github.com/withastro/astro/commit/27c80ea92248993e5fce94b2c26d87d611ab6785
- https://github.com/withastro/astro
- https://github.com/withastro/astro/releases/tag/astro@6.4.8
CVE-2026-59731 · published · modified · JSON