What’s Vulnerable › Products

Astro @Astrojs/Node vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Astro @Astrojs/Node version is affected

Latest Astro @Astrojs/Node vulnerabilities

• CVE-2026-29772 — Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands (CVSS 7.5)
• CVE-2026-27829 — Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize (CVSS 7.2)
• CVE-2026-27729 — Astro has memory exhaustion DoS due to missing request body size limit in Server Actions (CVSS 7.5)
• CVE-2026-25545 — Astro has Full-Read SSRF in error rendering via Host: header injection (CVSS 8.6)