CVE-2026-45028Published
Astro: Server island encrypted parameters vulnerable to cross-component replay
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-45028 · Microsoft / collected KEV context
cve-program · CVE-2026-45028
- https://github.com/withastro/astro/security/advisories/GHSA-xr5h-phrj-8vxv
- https://github.com/withastro/astro/pull/16457
- https://github.com/withastro/astro/commit/3d82220a1549e699e34ed433f3846a919f4c02bd
euvd · EUVD-2026-30054
- https://github.com/withastro/astro/security/advisories/GHSA-xr5h-phrj-8vxv
- https://github.com/withastro/astro/pull/16457
- https://github.com/withastro/astro/commit/3d82220a1549e699e34ed433f3846a919f4c02bd
nvd · CVE-2026-45028
- https://github.com/withastro/astro/commit/3d82220a1549e699e34ed433f3846a919f4c02bd
- https://github.com/withastro/astro/pull/16457
- https://github.com/withastro/astro/security/advisories/GHSA-xr5h-phrj-8vxv
osv · GHSA-xr5h-phrj-8vxv
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.