https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:44:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-73422 <p><strong>Affected:</strong> withastro astro</p> <p>Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro&#39;s server-side View Transition CSS generator interpolates animation properties into an inline style element without escaping them for CSS and HTML contexts. An attacker-controlled View Transition animation value such as duration can terminate the generated style element and inject arbitrary HTML or JavaScript. The affected code is packages/astro/src/runtime/server/transition.ts; renderTransition passes sheet.toString() into markHTMLString(), while addAnimationProperty serializes duration through toTimeValue() and also handles easing, direction, delay, fillMode, and name. Exploitation requires an on-demand or server-rendered route to pass attacker-controlled data into a View Transition animation definition and can execute arbitrary JavaScript in the affected application&#39;s origin, allowing access to sensitive page data and authenticated actions available to the victim. This issue is fixed in version 7.1.0.</p> <p><strong>Affected:</strong> withastro astro</p> <p>Astro is a web framework for content-driven websites. From 2.9.0 until 7.1.0, Astro&#39;s server-side View Transition CSS generator interpolates animation properties into an inline style element without escaping them for CSS and HTML contexts. An attacker-controlled View Transition animation value such as duration can terminate the generated style element and inject arbitrary HTML or JavaScript. The affected code is packages/astro/src/runtime/server/transition.ts; renderTransition passes sheet.toString() into markHTMLString(), while addAnimationProperty serializes duration through toTimeValue() and also handles easing, direction, delay, fillMode, and name. Exploitation requires an on-demand or server-rendered route to pass attacker-controlled data into a View Transition animation definition and can execute arbitrary JavaScript in the affected application&#39;s origin, allowing access to sensitive page data and authenticated actions available to the victim. This issue is fixed in version 7.1.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-73422