An open index of dependabot pull requests across open source projects.

astro

Ecosystem:
npm
Package URL:
pkg:npm/astro
Total PRs:
34,950 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
7,929 repositories
Unique Repos (30 days):
172 repositories
Security Advisories
Atro CSRF Middleware Bypass (security.checkOrigin)
GHSA-c4pw-33h3-35xw CVE-2024-56140 MODERATE published over 1 year ago • updated 6 days ago
### Summary A bug in Astro’s CSRF-protection middleware allows requests to bypass CSRF checks. ### Details When the `security.checkOrigin` confi...
Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values
GHSA-ggxq-hp9w-j794 CVE-2025-64765 MODERATE published 8 months ago • updated 2 days ago
A mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s middleware reads the path for validati...
Astro Development Server has Arbitrary Local File Read
GHSA-x3h8-62x9-952g CVE-2025-64757 LOW published 8 months ago • updated 2 days ago
### Summary A vulnerability has been identified in the Astro framework's development server that allows arbitrary local file read access through th...
Astro's server source code is exposed to the public if sourcemaps are enabled
GHSA-49w6-73cw-chjr CVE-2024-56159 HIGH published over 1 year ago • updated about 21 hours ago
### Summary A bug in the build process allows any unauthenticated user to read parts of the server source code. ### Details During build, along wi...
Astro: Server island encrypted parameters vulnerable to cross-component replay
GHSA-xr5h-phrj-8vxv CVE-2026-45028 LOW published 2 months ago • updated about 1 month ago
### Impact Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots pa...
Recent PRs
Bump astro from 5.18.2 to 7.0.5

testomatio/docs #645

5.18.2 → 7.0.5 Major PR
Open 18 days ago 1 comment
testomatio
Package Details
Name: astro
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/astro
JSON API: View JSON
Security Advisories

20

Active advisories
HIGH 5
MODERATE 11
LOW 4
View All npm Advisories
Package Information
Description:

Astro is a modern site builder with web best practices, performance, and DX front-of-mind.

Repository: https://github.com/withastro/astro
Homepage: https://astro.build
Latest Release: 4.16.16
over 1 year ago
Dependent Repos: 18,705
Dependent Packages: 915
Downloads: 1,349,386
Ranking: Top 0.1941% by dependent repos Top 0.2899% by downloads Top 0.0943% by dependent pkgs
PR Status
Open 16,147 (46.2%)
Merged 3,432 (9.8%)
Closed 13,016 (37.2%)
PR Types
Major 2,584 (7.4%)
Minor 18,677 (53.4%)
Patch 11,317 (32.4%)