Withastro

このタグに関連する脆弱性 2

• 中 6.5 Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and style elements as trusted HTML without distinguishing compiler-generated literal content from dynamic expression values. An application that passes attack... CVE-2026-114128 2:32
• 低 2.3 Astro: Arbitrary CSS injection in Astro View Transitions Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application that passes attacker-controlled data into properties such as duration, delay,... CVE-2026-114127 2:30