CVE-2026-73423
1 advisory.
npm/astro CVE-2026-73423: medium
Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered
Action: Upgrade astro to 7.0.6 or later.
npm i astro@7.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.6 | - |
Fixed versions
| 7.0.6 |
Sources
- osv: GHSA-8mv7-9c27-98vc
- https://github.com/withastro/astro/security/advisories/GHSA-8mv7-9c27-98vc
- https://github.com/withastro/astro/pull/17250
- https://github.com/withastro/astro/commit/0b30b35f864310bee8485c952d1877e82e2b9b1a
- https://github.com/withastro/astro
- https://github.com/withastro/astro/releases/tag/astro@7.0.6
CVE-2026-73423 · published · modified · JSON