All vulnerabilities

Servers and applications

GHSA-r3h5-4585-7x3w

Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems

Severity
Low
Published
9 Nov 2026
Last changed
9 Nov 2026
Added to UpHeron
9 Nov 2026
Fixed in
7.4.7
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
AstroServers and applications · github:withastro/astro
  • From 5.14.3 before 7.4.7

References