CVE-2026-126362 | Withastro Astro up to 9.1.1 @astrojs/svelte renderer injection

November 13, 2026 Yanac

A vulnerability identified as critical has been detected in Withastro Astro up to 9.1.1. This vulnerability affects unknown code of the component @astrojs/svelte renderer. The manipulation leads to injection.

This vulnerability is documented as CVE-2026-126362. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More