CVE-2026-73422
1 advisory.
npm/astro CVE-2026-73422: medium, EPSS 0.55%
Astro: Reflected XSS via unescaped View Transition animation properties
Action: Upgrade astro to 7.1.0 or later.
npm i astro@7.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.9.0 | 7.1.0 | - |
Fixed versions
| 7.1.0 |
Sources
- osv: GHSA-4g3v-8h47-v7g6
- https://github.com/withastro/astro/security/advisories/GHSA-4g3v-8h47-v7g6
- https://github.com/withastro/astro/pull/17393
- https://github.com/withastro/astro/commit/092da560eea77ee63a3e2c583c80d8238544e42b
- https://github.com/withastro/astro
- https://github.com/withastro/astro/releases/tag/astro@7.1.0
CVE-2026-73422 · published · modified · JSON