{"action":"Upgrade astro to 4.16.18 or later.","affected":[{"fixed":"5.0.8","introduced":"5.0.0-alpha.0"},{"fixed":"4.16.18","introduced":"0"}],"component":"astro","cve_ids":["CVE-2024-56159"],"ecosystem":"npm","epss":0.01536,"exploited":false,"fixed_versions":["5.0.8","4.16.18"],"ghsa_id":"GHSA-49w6-73cw-chjr","id":"tcs_01M5KF00XEBZ4GFEYGTG6DDSHD","modified_at":"2025-11-27T08:18:38.026555Z","published_at":"2024-12-19T15:12:33Z","references":["https://osv.dev/vulnerability/GHSA-49w6-73cw-chjr","https://github.com/withastro/astro/security/advisories/GHSA-49w6-73cw-chjr","https://nvd.nist.gov/vuln/detail/CVE-2024-56159","https://github.com/withastro/astro/issues/12703","https://github.com/withastro/astro/commit/039d022b1bbaacf9ea83071d27affc5318e0e515","https://github.com/withastro/astro/commit/c879f501ff01b1a3c577de776a1f7100d78f8dd5","https://github.com/getsentry/sentry-javascript/blob/develop/packages/astro/src/integration/index.ts#L50","https://github.com/withastro/astro","https://github.com/withastro/astro/blob/176fe9f113fd912f9b61e848b00bbcfecd6d5c2c/packages/astro/src/core/build/static-build.ts#L139"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-49w6-73cw-chjr","url":"https://osv.dev/vulnerability/GHSA-49w6-73cw-chjr"},{"source":"nvd","source_id":"CVE-2024-56159","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56159"}],"summary":"Astro's server source code is exposed to the public if sourcemaps are enabled"}