Astro Cloudflare adapter has a Stored Cross Site Scripting vulnerability in /_image endpoint

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-65019 · Microsoft / collected KEV context

EUVD-2025-198182

GHSA-fvmw-cj7j-j39q

cve-program · CVE-2025-65019

• https://github.com/withastro/astro/security/advisories/GHSA-fvmw-cj7j-j39q
• https://github.com/withastro/astro/commit/9e9c528191b6f5e06db9daf6ad26b8f68016e533

euvd · EUVD-2025-198182

• https://github.com/withastro/astro/security/advisories/GHSA-fvmw-cj7j-j39q
• https://github.com/withastro/astro/commit/9e9c528191b6f5e06db9daf6ad26b8f68016e533

nvd · CVE-2025-65019

• https://github.com/withastro/astro/commit/9e9c528191b6f5e06db9daf6ad26b8f68016e533
• https://github.com/withastro/astro/security/advisories/GHSA-fvmw-cj7j-j39q

osv · GHSA-fvmw-cj7j-j39q

• https://github.com/withastro/astro/security/advisories/GHSA-fvmw-cj7j-j39q
• https://nvd.nist.gov/vuln/detail/CVE-2025-65019
• https://github.com/withastro/astro/commit/9e9c528191b6f5e06db9daf6ad26b8f68016e533
• https://github.com/withastro/astro

No related operational record is retained in the current change model.