{"action":"Upgrade astro to 5.12.8 or later.","affected":[{"fixed":"5.12.8","introduced":"5.2.0"}],"component":"astro","cve_ids":["CVE-2025-54793"],"ecosystem":"npm","epss":0.00696,"exploited":false,"fixed_versions":["5.12.8"],"ghsa_id":"GHSA-cq8c-xv66-36gw","id":"tcs_01M5KFKA88G5EWGZKNZ3A5A9SB","modified_at":"2025-11-27T08:35:13.558198Z","published_at":"2025-08-07T16:41:55Z","references":["https://osv.dev/vulnerability/GHSA-cq8c-xv66-36gw","https://github.com/withastro/astro/security/advisories/GHSA-cq8c-xv66-36gw","https://nvd.nist.gov/vuln/detail/CVE-2025-54793","https://github.com/withastro/astro/commit/0567fb7b50c0c452be387dd7c7264b96bedab48f","https://github.com/withastro/astro"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cq8c-xv66-36gw","url":"https://osv.dev/vulnerability/GHSA-cq8c-xv66-36gw"},{"source":"nvd","source_id":"CVE-2025-54793","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54793"}],"summary":"Astros's duplicate trailing slash feature leads to an open redirection security issue"}