CVE-2026-73424
1 advisory.
npm/@astrojs/vercel CVE-2026-73424: medium 6.5, EPSS 0.38%
Astro: Unauthenticated path override in the @astrojs/vercel ISR function
Action: Upgrade @astrojs/vercel to 11.0.3 or later.
npm i @astrojs/vercel@11.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.3 | 11.0.3 | - |
Fixed versions
| 11.0.3 |
Sources
- osv: GHSA-x27w-589x-frm2
- https://github.com/withastro/astro/security/advisories/GHSA-mr6q-rp88-fx84
- https://github.com/withastro/astro/security/advisories/GHSA-x27w-589x-frm2
- https://github.com/withastro/astro/pull/16079
- https://github.com/withastro/astro/pull/17370
- https://github.com/withastro/astro/commit/3a43cf0f3690a8e33cb30109bc5165611cf38fcd
- https://github.com/withastro/astro/commit/aa266364fe9e105317b66e218fe04567307fb57f
- https://github.com/withastro/astro
- https://github.com/withastro/astro/releases/tag/@astrojs/vercel@11.0.3
CVE-2026-73424 · published · modified · JSON