CVE-2026-25545 | withastro up to 9.5.3 server-side request forgery (GHSA-qq67-mvv5-fw3g)

February 24, 2026 Yanac

A vulnerability was found in withastro astro up to 9.5.3. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-25545. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More