{"id":"CVE-2026-126364","summary":"Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems","details":"Astro is a web framework for content-driven websites. From 5.14.3 until 7.4.7, Astro's /_image endpoint compared the requested local-image path with the build output directory without preserving case on case-sensitive filesystems. A sibling directory whose path differed from the output directory only by letter case could therefore pass the containment check, allowing an unauthenticated requester to read image files accepted by the image service from outside the output directory. Exploitation required on-demand rendering with the @astrojs/node adapter, a case-sensitive filesystem, and a preexisting case-variant sibling directory; ordinary traversal to unrelated paths was already rejected. This issue is fixed in Astro version 7.4.7.","aliases":["GHSA-r3h5-4585-7x3w"],"modified":"2026-11-14T02:47:27.685974220Z","published":"2026-11-12T22:33:17.635Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-178","CWE-22"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126364.json"},"references":[{"type":"WEB","url":"https://github.com/withastro/astro/releases/tag/astro@7.4.7"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126364.json"},{"type":"ADVISORY","url":"https://github.com/withastro/astro/security/advisories/GHSA-r3h5-4585-7x3w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126364"},{"type":"FIX","url":"https://github.com/withastro/astro/commit/7da442bb286e0c29e1c9e1add6727b7cbf434f1a"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/withastro/astro","events":[{"introduced":"fe1d35cc950b16a6462102b98b48753d27395e03"},{"fixed":"cd30ae26e00232cad5ae0ad485d0f7c1c257ab8c"},{"fixed":"7da442bb286e0c29e1c9e1add6727b7cbf434f1a"}],"database_specific":{"extracted_events":[{"strategy":"StringRangeExpression","range":[{"introduced":"5.14.3"},{"fixed":"7.4.7"}],"source":"AFFECTED_FIELD"},{"source":"REFERENCES_COMMIT","range":[{"fixed":"7da442bb286e0c29e1c9e1add6727b7cbf434f1a"}]},{"source":"REFERENCES_TAG","original_tag":"astro@7.4.7","range":[{"fixed":"cd30ae26e00232cad5ae0ad485d0f7c1c257ab8c"}]}]}}],"versions":["astro@7.4.6","@astrojs/vercel@11.0.19","@astrojs/react@7.1.3","@astrojs/node@11.1.10","@astrojs/cloudflare@14.4.5","astro@7.4.5","@astrojs/vercel@11.0.18","@astrojs/netlify@8.2.11","@astrojs/cloudflare@14.4.4","astro@7.4.4","astro@7.4.3","@astrojs/vercel@11.0.17","@astrojs/telemetry@3.4.2","@astrojs/svelte@9.1.2","@astrojs/solid-js@7.1.2","@astrojs/react@7.1.2","@astrojs/prism@4.1.2","@astrojs/mdx@8.1.2","@astrojs/markdown-satteri@0.4.6","@astrojs/markdown-remark@7.3.5","@astrojs/markdoc@2.1.2","@astrojs/cloudflare@14.4.3","create-astro@5.3.1","astro@7.4.2","@astrojs/vue@7.1.2","@astrojs/upgrade@0.8.1","@astrojs/telemetry@3.4.1","@astrojs/svelte@9.1.1","@astrojs/solid-js@7.1.1","@astrojs/react@7.1.1","@astrojs/prism@4.1.1","@astrojs/preact@6.1.1","@astrojs/partytown@2.1.9","@astrojs/mdx@8.1.1","@astrojs/markdown-satteri@0.4.5","@astrojs/markdown-remark@7.3.4","@astrojs/markdoc@2.1.1","@astrojs/language-server@2.17.3","@astrojs/cloudflare@14.4.2","@astrojs/check@0.9.12","astro@7.4.1","@astrojs/vue@7.1.1","@astrojs/vercel@11.0.16","@astrojs/node@11.1.9","@astrojs/cloudflare@14.4.1","@astrojs/check@0.9.11","create-astro@5.3.0","astro@7.4.0","@astrojs/vue@7.1.0","@astrojs/vercel@11.0.15","@astrojs/upgrade@0.8.0","@astrojs/telemetry@3.4.0","@astrojs/svelte@9.1.0","@astrojs/solid-js@7.1.0","@astrojs/react@7.1.0","@astrojs/prism@4.1.0","@astrojs/preact@6.1.0","@astrojs/node@11.1.8","@astrojs/netlify@8.2.10","@astrojs/mdx@8.1.0","@astrojs/markdown-satteri@0.4.4","@astrojs/markdown-remark@7.3.3","@astrojs/markdoc@2.1.0","@astrojs/internal-helpers@0.13.0","@astrojs/cloudflare@14.4.0","@astrojs/vercel@11.0.14","create-astro@5.2.6","astro@7.3.8","astro-vscode@2.17.2","@astrojs/vercel@11.0.13","@astrojs/netlify@8.2.9","@astrojs/markdoc@2.0.11","astro@7.3.7","@astrojs/netlify@8.2.8","@astrojs/language-server@2.17.2","create-astro@5.2.5","astro@7.3.6","astro-vscode@2.17.1","@astrojs/vercel@11.0.12","@astrojs/react@7.0.1","@astrojs/preact@6.0.6","@astrojs/node@11.1.7","@astrojs/netlify@8.2.7","@astrojs/mdx@8.0.3","@astrojs/markdown-satteri@0.4.3","@astrojs/markdown-remark@7.3.2","@astrojs/markdoc@2.0.10","@astrojs/internal-helpers@0.12.0","@astrojs/cloudflare@14.3.4","astro@7.3.5","astro@7.3.3","astro-vscode@2.17.0","@astrojs/upgrade@0.7.5","@astrojs/ts-plugin@1.10.12","@astrojs/react@6.0.6","@astrojs/language-server@2.17.0","astro@7.3.4","@astrojs/vercel@11.0.11","@astrojs/ts-content-mapper@0.2.0","@astrojs/react@7.0.0","@astrojs/partytown@2.1.8","@astrojs/mdx@8.0.2","@astrojs/markdown-satteri@0.4.2","@astrojs/language-server@2.17.1","@astrojs/cloudflare@14.3.3","@astrojs/vue@7.0.3","@astrojs/node@11.1.6","@astrojs/netlify@8.2.6","@astrojs/cloudflare@14.3.2","astro@7.3.2","@astrojs/mdx@8.0.1","@astrojs/markdown-satteri@0.4.1","@astrojs/markdown-remark@7.3.1","@astrojs/cloudflare@14.3.1","astro@7.3.1","astro@7.3.0","@astrojs/vercel@11.0.10","@astrojs/cloudflare@14.3.0","astro@7.2.10","@astrojs/vercel@11.0.9","@astrojs/sitemap@3.7.4","@astrojs/react@6.0.5","@astrojs/preact@6.0.5","@astrojs/node@11.1.5","@astrojs/netlify@8.2.5","@astrojs/mdx@8.0.0","@astrojs/markdown-satteri@0.4.0","@astrojs/markdown-remark@7.3.0","@astrojs/markdoc@2.0.9","@astrojs/language-server@2.16.16","@astrojs/internal-helpers@0.11.0","@astrojs/cloudflare@14.2.6","astro@7.2.9","astro@7.2.8","astro@7.2.7","astro-vscode@2.16.20","@astrojs/language-server@2.16.15","@astrojs/cloudflare@14.2.5","astro@7.2.6","create-astro@5.2.4","astro@7.2.5","astro-vscode@2.16.19","@astrojs/vercel@11.0.8","@astrojs/netlify@8.2.4","@astrojs/mdx@7.0.8","@astrojs/markdown-satteri@0.3.8","@astrojs/cloudflare@14.2.4","astro@7.2.4","@astrojs/vercel@11.0.7","@astrojs/react@6.0.4","@astrojs/preact@6.0.4","@astrojs/node@11.1.4","@astrojs/netlify@8.2.3","@astrojs/mdx@7.0.7","@astrojs/markdown-satteri@0.3.7","@astrojs/markdown-remark@7.2.4","@astrojs/markdoc@2.0.8","@astrojs/internal-helpers@0.10.4","@astrojs/cloudflare@14.2.3","astro@7.2.3","@astrojs/vercel@11.0.6","@astrojs/ts-plugin@1.10.11","@astrojs/react@6.0.3","@astrojs/preact@6.0.3","@astrojs/node@11.1.3","@astrojs/netlify@8.2.2","@astrojs/mdx@7.0.6","@astrojs/markdown-satteri@0.3.6","@astrojs/markdown-remark@7.2.3","@astrojs/markdoc@2.0.7","@astrojs/internal-helpers@0.10.3","@astrojs/cloudflare@14.2.2","astro@7.2.2","@astrojs/node@11.1.2","astro@7.2.1","@astrojs/underscore-redirects@1.0.4","@astrojs/node@11.1.1","@astrojs/netlify@8.2.1","@astrojs/language-server@2.16.14","@astrojs/cloudflare@14.2.1","astro@7.2.0","@astrojs/vue@7.0.2","@astrojs/vercel@11.0.5","@astrojs/upgrade@0.7.4","@astrojs/solid-js@7.0.2","@astrojs/node@11.1.0","@astrojs/netlify@8.2.0","@astrojs/cloudflare@14.2.0","astro@7.1.6","@astrojs/cloudflare@14.1.7","astro@7.1.5","astro-vscode@2.16.18","@astrojs/vercel@11.0.4","@astrojs/react@6.0.2","@astrojs/preact@6.0.2","@astrojs/node@11.0.3","@astrojs/netlify@8.1.3","@astrojs/mdx@7.0.5","@astrojs/markdown-satteri@0.3.5","@astrojs/markdown-remark@7.2.2","@astrojs/markdoc@2.0.6","@astrojs/internal-helpers@0.10.2","@astrojs/cloudflare@14.1.6","create-astro@5.2.3","astro@7.1.4","@astrojs/mdx@7.0.4","@astrojs/markdoc@2.0.5","@astrojs/cloudflare@14.1.5","@astrojs/check@0.9.10","@astrojs/markdoc@2.0.4","@astrojs/language-server@2.16.13","astro@7.1.3","@astrojs/cloudflare@14.1.4","astro@7.1.2","astro@7.1.1","astro@7.1.0","astro@7.0.9","@astrojs/vercel@11.0.3","astro@7.0.8","@astrojs/netlify@8.1.2","@astrojs/mdx@7.0.3","@astrojs/markdown-satteri@0.3.4","@astrojs/language-server@2.16.12","@astrojs/cloudflare@14.1.3","astro@7.0.7","@astrojs/telemetry@3.3.3","@astrojs/cloudflare@14.1.2","create-astro@5.2.2","astro@7.0.6","@astrojs/vercel@11.0.2","@astrojs/ts-plugin@1.10.10","@astrojs/solid-js@7.0.1","@astrojs/react@6.0.1","@astrojs/preact@6.0.1","@astrojs/node@11.0.2","@astrojs/netlify@8.1.1","@astrojs/mdx@7.0.2","@astrojs/markdown-satteri@0.3.3","@astrojs/markdown-remark@7.2.1","@astrojs/markdoc@2.0.3","@astrojs/language-server@2.16.11","@astrojs/internal-helpers@0.10.1","@astrojs/cloudflare@14.1.1","astro@7.0.5","astro-vscode@2.16.17","@astrojs/vue@7.0.1","@astrojs/vercel@11.0.1","@astrojs/svelte@9.0.1","@astrojs/node@11.0.1","@astrojs/netlify@8.1.0","@astrojs/mdx@7.0.1","@astrojs/markdoc@2.0.2","@astrojs/cloudflare@14.1.0","create-astro@5.2.1","astro@7.0.4","@astrojs/rss@4.0.19","@astrojs/cloudflare@14.0.2","create-astro@5.2.0","astro@7.0.3","@astrojs/upgrade@0.7.3","@astrojs/markdoc@2.0.1","@astrojs/cloudflare@14.0.1","astro@7.0.2","@astrojs/markdown-satteri@0.3.2","astro@7.0.1","create-astro@5.1.0","astro@7.0.0","@astrojs/vue@7.0.0","@astrojs/vercel@11.0.0","@astrojs/svelte@9.0.0","@astrojs/solid-js@7.0.0","@astrojs/react@6.0.0","@astrojs/preact@6.0.0","@astrojs/node@11.0.0","@astrojs/netlify@8.0.0","@astrojs/mdx@7.0.0","@astrojs/markdown-satteri@0.3.1","@astrojs/markdoc@2.0.0","@astrojs/cloudflare@14.0.0","@astrojs/alpinejs@1.0.0","create-astro@5.1.0-beta.0","astro@7.0.0-beta.6","@astrojs/mdx@7.0.0-beta.4","@astrojs/markdown-satteri@0.3.1-beta.2","@astrojs/cloudflare@14.0.0-beta.3","astro@7.0.0-beta.5","@astrojs/vue@7.0.0-beta.2","@astrojs/svelte@9.0.0-beta.4","@astrojs/solid-js@7.0.0-beta.2","@astrojs/react@6.0.0-beta.2","@astrojs/preact@6.0.0-beta.2","@astrojs/mdx@7.0.0-beta.3","astro@6.4.7","astro@7.0.0-beta.4","@astrojs/node@11.0.0-beta.2","astro@6.4.6","@astrojs/netlify@7.0.13","astro@6.4.5","@astrojs/node@10.1.4","@astrojs/mdx@6.0.3","@astrojs/markdown-satteri@0.3.0","@astrojs/db@0.21.3","@astrojs/cloudflare@13.7.0","astro@6.4.4","@astrojs/mdx@6.0.2","@astrojs/markdown-satteri@0.2.2","astro@6.4.3","@astrojs/react@5.0.7","@astrojs/preact@5.1.5","@astrojs/node@10.1.3","@astrojs/netlify@7.0.12","@astrojs/cloudflare@13.6.1","astro@6.4.2","@astrojs/markdown-satteri@0.2.1","astro@6.4.0","@astrojs/vercel@10.0.8","@astrojs/react@5.0.6","@astrojs/preact@5.1.4","@astrojs/node@10.1.2","@astrojs/netlify@7.0.11","@astrojs/mdx@6.0.0","@astrojs/markdown-satteri@0.2.0","@astrojs/markdown-remark@7.2.0","@astrojs/markdoc@1.0.6","@astrojs/internal-helpers@0.10.0","@astrojs/cloudflare@13.6.0","astro@6.3.8","@astrojs/svelte@8.1.2","@astrojs/sitemap@3.7.3","@astrojs/language-server@2.16.10","@astrojs/cloudflare@13.5.5","astro@6.3.7","@astrojs/cloudflare@13.5.4","astro@6.3.6","@astrojs/cloudflare@13.5.3","astro@6.3.5","astro@6.3.4","astro-vscode@2.16.16","@astrojs/yaml2ts@0.2.4","@astrojs/ts-plugin@1.10.9","@astrojs/netlify@7.0.10","@astrojs/language-server@2.16.9","@astrojs/db@0.21.2","@astrojs/cloudflare@13.5.2","astro@6.3.3","@astrojs/mdx@5.0.6","astro@6.3.2","astro-vscode@2.16.15","@astrojs/vercel@10.0.7","@astrojs/ts-plugin@1.10.8","@astrojs/svelte@8.1.1","@astrojs/react@5.0.5","@astrojs/prism@4.0.2","@astrojs/preact@5.1.3","@astrojs/node@10.1.1","@astrojs/netlify@7.0.9","@astrojs/mdx@5.0.5","@astrojs/markdown-remark@7.1.2","@astrojs/markdoc@1.0.5","@astrojs/internal-helpers@0.9.1","@astrojs/cloudflare@13.5.1","@astrojs/node@10.1.0","@astrojs/cloudflare@13.5.0","astro@6.3.1","astro@6.3.0","@astrojs/telemetry@3.3.2","@astrojs/language-server@2.16.8","@astrojs/cloudflare@13.4.0","astro@6.2.2","@astrojs/cloudflare@13.3.1","astro@6.2.1","@astrojs/db@0.21.1","astro@6.2.0","@astrojs/cloudflare@13.3.0","astro@6.1.10","@astrojs/vercel@10.0.6","@astrojs/svelte@8.1.0","@astrojs/language-server@2.16.7","@astrojs/db@0.21.0","@astrojs/cloudflare@13.2.2","@astrojs/check@0.9.9","@astrojs/cloudflare@13.2.1","create-astro@5.0.6","astro@6.1.9","@astrojs/vercel@10.0.5","@astrojs/upgrade@0.7.2","@astrojs/react@5.0.4","@astrojs/preact@5.1.2","@astrojs/node@10.0.6","@astrojs/netlify@7.0.8","@astrojs/mdx@5.0.4","@astrojs/markdown-remark@7.1.1","@astrojs/markdoc@1.0.4","@astrojs/internal-helpers@0.9.0","@astrojs/cloudflare@13.2.0","astro@6.1.8","@astrojs/telemetry@3.3.1","astro@6.1.7","@astrojs/node@10.0.5","@astrojs/netlify@7.0.7","@astrojs/cloudflare@13.1.10","astro@6.1.6","@astrojs/svelte@8.0.5","@astrojs/partytown@2.1.7","@astrojs/cloudflare@13.1.9","astro@6.1.5","@astrojs/cloudflare@13.1.8","astro@6.1.4","@astrojs/react@5.0.3","astro@6.1.3","@astrojs/vercel@10.0.4","@astrojs/underscore-redirects@1.0.3","@astrojs/preact@5.1.1","@astrojs/netlify@7.0.6","@astrojs/cloudflare@13.1.7","@astrojs/cloudflare@13.1.6","create-astro@5.0.5","astro@6.1.2","@astrojs/cloudflare@13.1.5","create-astro@5.0.4","astro@6.1.1","astro@6.1.0","astro-vscode@2.16.14","@astrojs/vercel@10.0.3","@astrojs/svelte@8.0.4","@astrojs/sitemap@3.7.2","@astrojs/rss@4.0.18","@astrojs/react@5.0.2","@astrojs/preact@5.1.0","@astrojs/partytown@2.1.6","@astrojs/node@10.0.4","@astrojs/netlify@7.0.5","@astrojs/mdx@5.0.3","@astrojs/markdown-remark@7.1.0","@astrojs/markdoc@1.0.3","@astrojs/cloudflare@13.1.4","astro@6.0.8","@astrojs/underscore-redirects@1.0.2","@astrojs/netlify@7.0.4","@astrojs/cloudflare@13.1.3","create-astro@5.0.3","astro@6.0.7","@astrojs/vercel@10.0.2","@astrojs/svelte@8.0.3","@astrojs/node@10.0.3","create-astro@5.0.2","astro@6.0.6","astro-vscode@2.16.13","@astrojs/upgrade@0.7.1","@astrojs/svelte@8.0.2","@astrojs/solid-js@6.0.1","@astrojs/react@5.0.1","@astrojs/prism@4.0.1","@astrojs/preact@5.0.2","@astrojs/mdx@5.0.2","@astrojs/markdown-remark@7.0.1","@astrojs/markdoc@1.0.2","@astrojs/language-server@2.16.6","@astrojs/db@0.20.1","create-astro@5.0.1","astro@6.0.5","astro-vscode@2.16.12","@astrojs/vue@6.0.1","@astrojs/vercel@10.0.1","@astrojs/svelte@8.0.1","@astrojs/preact@5.0.1","@astrojs/node@10.0.2","@astrojs/netlify@7.0.3","@astrojs/mdx@5.0.1","@astrojs/markdoc@1.0.1","@astrojs/language-server@2.16.5","@astrojs/cloudflare@13.1.2","@astrojs/check@0.9.8","astro@6.0.4","@astrojs/node@10.0.1","@astrojs/netlify@7.0.2","@astrojs/cloudflare@13.1.1","astro@6.0.3","@astrojs/cloudflare@13.1.0","astro@6.0.2","@astrojs/cloudflare@13.0.2","astro@6.0.1","astro-vscode@2.16.11","@astrojs/rss@4.0.17","@astrojs/partytown@2.1.5","create-astro@5.0.0","astro@6.0.0","astro-vscode@2.16.9","@astrojs/vue@6.0.0","@astrojs/vercel@10.0.0","@astrojs/upgrade@0.7.0","@astrojs/svelte@8.0.0","@astrojs/solid-js@6.0.0","@astrojs/sitemap@3.7.1","@astrojs/rss@4.0.16","@astrojs/react@5.0.0","@astrojs/prism@4.0.0","@astrojs/preact@5.0.0","@astrojs/node@10.0.0","@astrojs/netlify@7.0.0","@astrojs/mdx@5.0.0","@astrojs/markdown-remark@7.0.0","@astrojs/markdoc@1.0.0","@astrojs/internal-helpers@0.8.0","@astrojs/db@0.20.0","@astrojs/cloudflare@13.0.0","@astrojs/check@0.9.7","@astrojs/alpinejs@0.5.0","astro@6.0.0-beta.20","@astrojs/vercel@10.0.0-beta.8","@astrojs/react@5.0.0-beta.4","@astrojs/preact@5.0.0-beta.5","@astrojs/node@10.0.0-beta.9","@astrojs/netlify@7.0.0-beta.14","@astrojs/mdx@5.0.0-beta.12","@astrojs/markdown-remark@7.0.0-beta.11","@astrojs/markdoc@1.0.0-beta.15","@astrojs/internal-helpers@0.8.0-beta.3","@astrojs/cloudflare@13.0.0-beta.14","astro@6.0.0-beta.19","@astrojs/vercel@10.0.0-beta.7","@astrojs/node@10.0.0-beta.8","@astrojs/netlify@7.0.0-beta.13","@astrojs/mdx@5.0.0-beta.11","@astrojs/markdown-remark@7.0.0-beta.10","@astrojs/markdoc@1.0.0-beta.14","@astrojs/internal-helpers@0.8.0-beta.2","@astrojs/cloudflare@13.0.0-beta.13","astro@6.0.0-beta.18","@astrojs/node@10.0.0-beta.7","@astrojs/mdx@5.0.0-beta.10","@astrojs/markdown-remark@7.0.0-beta.9","@astrojs/markdoc@1.0.0-beta.13","@astrojs/cloudflare@13.0.0-beta.12","astro@6.0.0-beta.17","@astrojs/vercel@10.0.0-beta.6","@astrojs/node@10.0.0-beta.6","@astrojs/netlify@7.0.0-beta.12","@astrojs/mdx@5.0.0-beta.9","@astrojs/markdown-remark@7.0.0-beta.8","@astrojs/markdoc@1.0.0-beta.12","@astrojs/cloudflare@13.0.0-beta.11","astro@6.0.0-beta.16","@astrojs/netlify@7.0.0-beta.11","@astrojs/cloudflare@13.0.0-beta.10","astro@6.0.0-beta.15","@astrojs/svelte@8.0.0-beta.3","@astrojs/rss@4.0.15-beta.4","@astrojs/preact@5.0.0-beta.4","@astrojs/node@10.0.0-beta.5","@astrojs/cloudflare@13.0.0-beta.9","astro@6.0.0-beta.14","astro@6.0.0-beta.13","@astrojs/mdx@5.0.0-beta.8","@astrojs/markdown-remark@7.0.0-beta.7","@astrojs/markdoc@1.0.0-beta.11","astro@6.0.0-beta.12","astro-vscode@2.16.9-beta.0","@astrojs/vercel@10.0.0-beta.5","@astrojs/netlify@7.0.0-beta.10","@astrojs/markdoc@1.0.0-beta.10","@astrojs/db@0.19.0-beta.4","@astrojs/cloudflare@13.0.0-beta.8","create-astro@5.0.0-beta.4","astro@6.0.0-beta.10","@astrojs/vue@6.0.0-beta.1","@astrojs/vercel@10.0.0-beta.3","@astrojs/node@10.0.0-beta.3","@astrojs/netlify@7.0.0-beta.8","@astrojs/mdx@5.0.0-beta.6","@astrojs/markdown-remark@7.0.0-beta.6","@astrojs/markdoc@1.0.0-beta.9","@astrojs/internal-helpers@0.8.0-beta.1","@astrojs/cloudflare@13.0.0-beta.6","astro@6.0.0-beta.11","@astrojs/vercel@10.0.0-beta.4","@astrojs/node@10.0.0-beta.4","@astrojs/netlify@7.0.0-beta.9","@astrojs/mdx@5.0.0-beta.7","@astrojs/cloudflare@13.0.0-beta.7","astro@6.0.0-beta.9","@astrojs/cloudflare@13.0.0-beta.5","astro@6.0.0-beta.8","@astrojs/vercel@10.0.0-beta.2","@astrojs/node@10.0.0-beta.2","@astrojs/netlify@7.0.0-beta.7","@astrojs/mdx@5.0.0-beta.5","@astrojs/markdown-remark@7.0.0-beta.5","@astrojs/markdoc@1.0.0-beta.8","create-astro@5.0.0-beta.3","astro@6.0.0-beta.7","@astrojs/vercel@10.0.0-beta.1","@astrojs/sitemap@3.6.1-beta.3","@astrojs/rss@4.0.15-beta.3","@astrojs/preact@5.0.0-beta.3","@astrojs/node@10.0.0-beta.1","@astrojs/netlify@7.0.0-beta.6","@astrojs/mdx@5.0.0-beta.4","@astrojs/markdown-remark@7.0.0-beta.4","@astrojs/markdoc@1.0.0-beta.7","@astrojs/internal-helpers@0.8.0-beta.0","@astrojs/db@0.19.0-beta.3","@astrojs/cloudflare@13.0.0-beta.4","astro@5.17.1","astro@5.17.0","astro@5.16.16","astro@5.16.15","astro@5.16.14","astro@5.16.13","@astrojs/db@0.19.0","astro@5.16.12","astro@5.16.11","astro@5.16.10","@astrojs/vercel@9.0.4","@astrojs/sitemap@3.7.0","@astrojs/rss@4.0.15","@astrojs/node@9.5.2","@astrojs/netlify@6.6.4","@astrojs/language-server@2.16.3","astro@5.16.9","astro-vscode@2.16.8","astro@5.16.8","astro-vscode@2.16.7","astro@5.16.7","astro-vscode@2.16.6","@astrojs/vue@5.1.4","@astrojs/vercel@9.0.3","@astrojs/svelte@7.2.5","@astrojs/sitemap@3.6.1","astro@5.16.6","@astrojs/svelte@7.2.4","astro@5.16.5","astro-vscode@2.16.5","@astrojs/svelte@7.2.3","@astrojs/mdx@4.3.13","@astrojs/markdown-remark@6.3.10","@astrojs/markdoc@0.15.10","astro@5.16.4","@astrojs/language-server@2.16.2","astro@5.16.3","astro@5.16.2","astro-vscode@2.16.4","astro-vscode@2.16.3","astro-vscode@2.16.2","astro-vscode@2.16.1","@astrojs/ts-plugin@1.10.6","@astrojs/language-server@2.16.1","@astrojs/check@0.9.6","astro@5.16.1","@astrojs/vercel@9.0.2","@astrojs/netlify@6.6.3","@astrojs/cloudflare@12.6.12","astro@5.16.0","@astrojs/rss@4.0.14","@astrojs/netlify@6.6.2","@astrojs/mdx@4.3.12","@astrojs/db@0.18.3","astro@5.15.9","@astrojs/vercel@9.0.1","@astrojs/node@9.5.1","@astrojs/netlify@6.6.1","@astrojs/mdx@4.3.11","@astrojs/markdown-remark@6.3.9","@astrojs/markdoc@0.15.9","@astrojs/internal-helpers@0.7.5","@astrojs/cloudflare@12.6.11","astro@5.15.8","astro@5.15.7","astro@5.15.6","astro@5.15.5","astro@5.15.4","@astrojs/vue@5.1.3","@astrojs/svelte@7.2.2","@astrojs/solid-js@5.1.3","@astrojs/react@4.4.2","@astrojs/preact@4.1.3","@astrojs/mdx@4.3.10","astro@5.15.3","astro-vscode@2.16.0","@astrojs/language-server@2.16.0","astro@5.15.2","@astrojs/vue@5.1.2","@astrojs/svelte@7.2.1","@astrojs/solid-js@5.1.2","@astrojs/react@4.4.1","@astrojs/preact@4.1.2","@astrojs/mdx@4.3.9","@astrojs/db@0.18.2","astro@5.15.1","astro@5.15.0","@astrojs/rss@4.0.13","@astrojs/netlify@6.6.0","@astrojs/db@0.18.1","astro@5.14.8","@astrojs/vercel@8.2.11","astro@5.14.7","astro@5.14.6","create-astro@4.13.2","astro@5.14.5","@astrojs/vercel@8.2.10","@astrojs/node@9.5.0","@astrojs/netlify@6.5.13","astro@5.14.4","@astrojs/node@9.4.6","astro@5.14.3","@astrojs/vercel@8.2.9","@astrojs/node@9.4.5","@astrojs/netlify@6.5.12","@astrojs/mdx@4.3.7","@astrojs/markdown-remark@6.3.8","@astrojs/markdoc@0.15.8","@astrojs/internal-helpers@0.7.4","@astrojs/cloudflare@12.6.10"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126364.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}]}