CVE security advisories and vulnerability history for astro by withastro.
35
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
29
Public exploits
PoC or exploit code
5.9
Avg CVSS
2024–2026
Last updated
Overview
withastro astro has 35 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 29 have a known public exploit. The average CVSS base score across scored CVEs is 5.9.
This page aggregates every publicly disclosed vulnerability (CVE) affecting withastro astro, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of withastro astro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical1
High10
Medium18
Low6
In CISA’s Known Exploited Vulnerabilities catalog
0
None of withastro astro's CVEs are currently listed in CISA's KEV catalog.
Public exploits
29
29 of withastro astro's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every withastro astro version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about withastro astro vulnerabilities.
How many CVEs does withastro astro have?
withastro astro has 35 published CVE records since 2024.
How many withastro astro CVEs are in CISA KEV?
None of withastro astro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for withastro astro vulnerabilities?
Yes — 29 of withastro astro's CVEs have a known public exploit.
Which versions of withastro astro are affected?
3,006 distinct withastro astro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in withastro astro CVEs?
withastro astro's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-918 (Server-Side Request Forgery (SSRF)), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')), CWE-20 (Improper Input Validation).
How many critical withastro astro vulnerabilities are there?
withastro astro has 1 critical and 10 high-severity CVEs.
What is the average severity of withastro astro CVEs?
The average CVSS base score across withastro astro's scored CVEs is 5.9.