https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 05:17:31 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260792 EUVD-2026-260792 https://cve.radiocsirt.org/vuln/euvd-2026-260792 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64745 <p>Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro&#39;s development server error pages when the `trailingSlash` configuration option is used. An attacker can inject arbitrary JavaScript code that executes in the victim&#39;s browser context by crafting a malicious URL. While this vulnerability only affects the development server and not production builds, it could be exploited to compromise developer environments through social engineering or malicious links. Version 5.15.6 fixes the issue.</p> <p>Astro is a web framework. Starting in version 5.2.0 and prior to version 5.15.6, a Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro&#39;s development server error pages when the `trailingSlash` configuration option is used. An attacker can inject arbitrary JavaScript code that executes in the victim&#39;s browser context by crafting a malicious URL. While this vulnerability only affects the development server and not production builds, it could be exploited to compromise developer environments through social engineering or malicious links. Version 5.15.6 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64745 https://cve.radiocsirt.org/vuln/ghsa-w2vj-39qv-7vh7 <p><strong>Affected:</strong> npm: astro</p> <p>## Summary</p> <p>A Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro&#39;s development server error pages when the `trailingSlash` configuration option is used. An attacker can inject arbitrary JavaScript code that executes in the victim&#39;s browser context by crafting a malicious URL. While this vulnerability only affects the development server and not production builds, it could be exploited to compromise developer environments through social engineering or malicious links.</p> <p>## Details</p> <p>### Vulnerability Location</p> <p>https://github.com/withastro/astro/blob/5bc37fd5cade62f753aef66efdf40f982379029a/packages/astro/src/template/4xx.ts#L133-L149</p> <p>### Root Cause</p> <p>The vulnerability was introduced in commit `536175528` (PR #12994) , as part of a feature to &#34;redirect trailing slashes on on-demand rendered pages.&#34; The feature added a helpful 404 error page in development mode to alert developers of trailing slash mismatches.</p> <p>**Issue**: The `corrected` variable, which is derived from the user-controlled `pathname` parameter, is directly interpolated into the HTML without proper escaping. While the `pathname` variable itself is escaped elsewhere in the same file (line 114: `escape(pathname)`), the `corrected` variable is not sanitized before being inserted into both the `href` attribute and the link text.</p> <p>### Attack Vector</p> <p>When a developer has configured `trailingSlash` to `&#39;always&#39;` or `&#39;never&#39;` and visits a URL with a mismatched trailing slash, the development server returns a…</p> <p><strong>Affected:</strong> npm: astro</p> <p>## Summary</p> <p>A Reflected Cross-Site Scripting (XSS) vulnerability exists in Astro&#39;s development server error pages when the `trailingSlash` configuration option is used. An attacker can inject arbitrary JavaScript code that executes in the victim&#39;s browser context by crafting a malicious URL. While this vulnerability only affects the development server and not production builds, it could be exploited to compromise developer environments through social engineering or malicious links.</p> <p>## Details</p> <p>### Vulnerability Location</p> <p>https://github.com/withastro/astro/blob/5bc37fd5cade62f753aef66efdf40f982379029a/packages/astro/src/template/4xx.ts#L133-L149</p> <p>### Root Cause</p> <p>The vulnerability was introduced in commit `536175528` (PR #12994) , as part of a feature to &#34;redirect trailing slashes on on-demand rendered pages.&#34; The feature added a helpful 404 error page in development mode to alert developers of trailing slash mismatches.</p> <p>**Issue**: The `corrected` variable, which is derived from the user-controlled `pathname` parameter, is directly interpolated into the HTML without proper escaping. While the `pathname` variable itself is escaped elsewhere in the same file (line 114: `escape(pathname)`), the `corrected` variable is not sanitized before being inserted into both the `href` attribute and the link text.</p> <p>### Attack Vector</p> <p>When a developer has configured `trailingSlash` to `&#39;always&#39;` or `&#39;never&#39;` and visits a URL with a mismatched trailing slash, the development server returns a…</p> https://cve.radiocsirt.org/vuln/ghsa-w2vj-39qv-7vh7