cve-2025-64764

HIGH CVSS 7.1 vulncheck_kev

Description

Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component template(s). This issue has been patched in version 5.15.8.

Timeline

Published: 2025-12-15 00:00 UTC
Last Modified: 2025-12-15

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 7.1,
  "datePublished": "2025-12-15T00:00:00Z",
  "dateUpdated": "2025-12-15T00:00:00Z",
  "description": "Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the component template(s). This issue has been patched in version 5.15.8.",
  "dueDate": "",
  "id": "CVE-2025-64764",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "astro",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "astro astro Improper Neutralization of Script-Related HTML Tags in a Web Page",
  "vendor": "astro"
}

cve-2025-64764

Raw JSON Data