What’s Vulnerable › Products

KindSpells astro-shield vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your KindSpells astro-shield version is affected

Latest KindSpells astro-shield vulnerabilities

• CVE-2024-30250 — In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists (CVSS 7.5)
• CVE-2024-29896 — Astro-Shield's Content-Security-Policy header generation in middleware could be compromised by malicious injections (CVSS 7.5)