CVE-2026-73423Published
Astro is a web framework for content-driven websites. From 7.0.0 until 7.0.6, the composable astro/hono pipeline installs security.checkOrigin only through the middleware() primitive, while actions() and pages() can dispatch to user code in…
Exact source revision recorded 25 Oct 2026 15:19:09 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-73423
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.