Vulnerabilities

TI-2026-23358 CVE-2026-29772 · GHSA-3rmj-9m5h-8fpv

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

HIGH 66

Astro is a web framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2026-03-24 Fixed in 10.0.0 CWE-770

TI-2026-22180 CVE-2026-27829 · GHSA-cj9f-h6r6-4cx2

HIGH 65

Astro is a web framework.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0032 Published 2026-02-26 Fixed in 9.5.4 CWE-918

TI-2026-22091 CVE-2026-27729 · GHSA-jm64-8m5q-4qh8

HIGH 66

Astro is a web framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00482 Published 2026-02-24 Fixed in 9.5.4 CWE-770

TI-2026-20654 CVE-2026-25545 · GHSA-qq67-mvv5-fw3g

MEDIUM 64

Astro is a web framework.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01933 Published 2026-02-24 Fixed in 9.5.4 CWE-918