CVE-2026-59729 | Astro up to 6.4.8 Attribute Name renderHTMLElement cross site scripting

July 26, 2026 Yanac

A vulnerability described as problematic has been identified in Astro. The impacted element is the function renderHTMLElement of the component Attribute Name Handler. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-59729. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More