{"action":"Upgrade @astrojs/node to 11.1.3 or later.","affected":[{"fixed":"11.1.3","introduced":"0"}],"component":"@astrojs/node","cve_ids":["CVE-2026-102984"],"ecosystem":"npm","epss":0.00362,"exploited":false,"fixed_versions":["11.1.3"],"ghsa_id":"GHSA-qh8j-hqjv-7m4x","id":"tcs_01M5KG66MA23CJTAZ1H8SJDFCZ","modified_at":"2026-09-30T23:45:04.031843511Z","published_at":"2026-09-30T23:29:40Z","references":["https://osv.dev/vulnerability/GHSA-qh8j-hqjv-7m4x","https://github.com/withastro/astro/security/advisories/GHSA-qh8j-hqjv-7m4x","https://nvd.nist.gov/vuln/detail/CVE-2026-102984","https://github.com/withastro/astro/pull/17572","https://github.com/withastro/astro/commit/2066f39c60707a100531b4ef4bb5dab8feafa7f2","https://github.com/withastro/astro","https://github.com/withastro/astro/releases/tag/@astrojs/node@11.1.3"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-qh8j-hqjv-7m4x","url":"https://osv.dev/vulnerability/GHSA-qh8j-hqjv-7m4x"},{"source":"nvd","source_id":"CVE-2026-102984","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102984"}],"summary":"Astro: Malformed port in the Host header can crash the Node adapter"}