PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
@astrojs/node Astro: Malformed port in the Host header can crash the Node adapter High Risk 8.0 8 hours ago 8 hours ago
@astrojs/node @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect Low Risk 3.0 2 months ago 1 month ago
@astrojs/node Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed Medium Risk 5.3 5 months ago 4 months ago
@astrojs/node Astro has Full-Read SSRF in error rendering via Host: header injection High Risk 8.6 7 months ago 6 months ago
@astrojs/node Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands Medium Risk 5.9 6 months ago 6 months ago
@astrojs/node Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize Medium Risk 6.5 7 months ago 7 months ago
@astrojs/node Astro has memory exhaustion DoS due to missing request body size limit in Server Actions Medium Risk 5.9 7 months ago 7 months ago
@astrojs/node Astro allows unauthorized third-party images in _image endpoint Medium Risk 6.1 1 year ago 10 months ago
@astrojs/node @astrojs/node's trailing slash handling causes open redirect issue Medium Risk 6.0 1 year ago 1 year ago
Data courtesy of OSV.dev
Page 1