{"action":"Upgrade @astrojs/vercel to 11.0.3 or later.","affected":[{"fixed":"11.0.3","introduced":"10.0.3"}],"component":"@astrojs/vercel","cve_ids":["CVE-2026-73424"],"ecosystem":"npm","epss":0.00384,"exploited":false,"fixed_versions":["11.0.3"],"ghsa_id":"GHSA-x27w-589x-frm2","id":"tcs_01M5KGGEY4ZKEQGRDVWFP7H4Y3","modified_at":"2026-08-17T17:26:01.685211Z","published_at":"2026-07-20T23:25:07Z","references":["https://osv.dev/vulnerability/GHSA-x27w-589x-frm2","https://github.com/withastro/astro/security/advisories/GHSA-mr6q-rp88-fx84","https://github.com/withastro/astro/security/advisories/GHSA-x27w-589x-frm2","https://github.com/withastro/astro/pull/16079","https://github.com/withastro/astro/pull/17370","https://github.com/withastro/astro/commit/3a43cf0f3690a8e33cb30109bc5165611cf38fcd","https://github.com/withastro/astro/commit/aa266364fe9e105317b66e218fe04567307fb57f","https://github.com/withastro/astro","https://github.com/withastro/astro/releases/tag/@astrojs/vercel@11.0.3"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-x27w-589x-frm2","url":"https://osv.dev/vulnerability/GHSA-x27w-589x-frm2"}],"summary":"Astro: Unauthenticated path override in the @astrojs/vercel ISR function"}