{"id":"CVE-2026-126365","summary":"Astro: XSS via unescaped code for unsupported languages in @astrojs/prism","details":"Astro is a web framework for content-driven websites. Prior to @astrojs/prism 4.1.2, and from @astrojs/markdoc 0.3.0 until 2.1.2, runHighlighterWithAstro() returned code unchanged when Prism had no grammar for the requested language, and callers inserted that result as raw HTML. A code block labeled with an unsupported language could therefore render embedded HTML and script instead of displaying it as text. The Prism component was affected when applications supplied untrusted code with an unsupported or attacker-controlled lang, and the @astrojs/markdoc prism() extension was affected for less-trusted content authors even when Markdoc's ordinary HTML rendering was disabled. This issue is fixed in @astrojs/prism 4.1.2 and @astrojs/markdoc 2.1.2.","aliases":["GHSA-ff38-p3qj-4pmf"],"modified":"2026-11-13T10:46:55.895577877Z","published":"2026-11-12T22:36:18.099Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-79"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126365.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/126xxx/CVE-2026-126365.json"},{"type":"FIX","url":"https://github.com/withastro/astro/commit/edfbf4ab34ff007ae8f7188af76a023a15c9443d"},{"type":"WEB","url":"https://github.com/withastro/astro/releases/tag/@astrojs/markdoc@2.1.2"},{"type":"WEB","url":"https://github.com/withastro/astro/releases/tag/@astrojs/prism@4.1.2"},{"type":"ADVISORY","url":"https://github.com/withastro/astro/security/advisories/GHSA-ff38-p3qj-4pmf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126365"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/withastro/astro","events":[{"introduced":"0"},{"fixed":"fda754dde84542613001602763892f162f6023ad"},{"fixed":"7a275c1648a80d82686f8f7f04588ae448e9a1a3"},{"introduced":"1554a37622babf5486d1201425d39142bc854a62"},{"fixed":"af25778a9b985ffebc782058b1493241cc8bf5c7"},{"fixed":"edfbf4ab34ff007ae8f7188af76a023a15c9443d"}],"database_specific":{"extracted_events":[{"strategy":"StringRangeExpression","range":[{"introduced":"0"},{"fixed":"7.4.3"}],"source":"AFFECTED_FIELD"},{"source":"AFFECTED_FIELD","strategy":"StringRangeExpression","range":[{"introduced":"0"},{"fixed":"4.1.2"}]},{"source":"AFFECTED_FIELD","strategy":"StringRangeExpression","range":[{"introduced":"0.3.0"},{"fixed":"2.1.2"}]},{"range":[{"fixed":"edfbf4ab34ff007ae8f7188af76a023a15c9443d"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["astro@2.1.1","create-astro@3.1.0","astro@2.1.0","@astrojs/webapi@2.1.0","@astrojs/vue@2.1.0","@astrojs/vercel@3.2.0","@astrojs/turbolinks@0.2.0","@astrojs/telemetry@2.1.0","@astrojs/tailwind@3.1.0","@astrojs/svelte@2.1.0","@astrojs/solid-js@2.1.0","@astrojs/sitemap@1.2.0","@astrojs/rss@2.2.0","@astrojs/react@2.1.0","@astrojs/prism@2.1.0","@astrojs/prefetch@0.2.0","@astrojs/preact@2.1.0","@astrojs/partytown@1.1.0","@astrojs/node@5.1.0","@astrojs/netlify@2.2.0","@astrojs/mdx@0.18.0","@astrojs/markdown-remark@2.1.0","@astrojs/markdoc@0.0.1","@astrojs/lit@1.3.0","@astrojs/image@0.16.0","@astrojs/deno@4.1.0","@astrojs/cloudflare@6.2.0","@astrojs/alpinejs@0.2.0","astro@2.0.18","@astrojs/webapi@2.0.3","create-astro@3.0.5","astro@2.0.17","@astrojs/vercel@3.1.4","create-astro@3.0.4","astro@2.0.16","@astrojs/webapi@2.0.2","@astrojs/telemetry@2.0.1","@astrojs/lit@1.2.1","create-astro@3.0.3","astro@2.0.15","@astrojs/vercel@3.1.3","@astrojs/sitemap@1.1.0","@astrojs/node@5.0.4","@astrojs/netlify@2.1.3","@astrojs/mdx@0.17.2","@astrojs/image@0.15.1","astro@2.0.14","@astrojs/webapi@2.0.1","@astrojs/deno@4.0.2","create-astro@3.0.2","@astrojs/rss@2.1.1","create-astro@3.0.1","astro@2.0.13","@astrojs/vercel@3.1.2","@astrojs/mdx@0.17.0","@astrojs/deno@4.0.1","@astrojs/svelte@2.0.2","@astrojs/mdx@0.16.2","astro@2.0.12","@astrojs/mdx@0.16.1","@astrojs/image@0.15.0","astro@2.0.11","@astrojs/preact@2.0.3","@astrojs/cloudflare@6.1.3","astro@2.0.10","@astrojs/vercel@3.1.1","astro@2.0.9","@astrojs/vercel@3.1.0","astro@2.0.8","create-astro@3.0.0","astro@2.0.7","@astrojs/netlify@2.1.2","@astrojs/lit@1.2.0","@astrojs/image@0.14.1","@astrojs/cloudflare@6.1.2","@astrojs/preact@2.0.2","@astrojs/node@5.0.3","astro@2.0.6","@astrojs/vercel@3.0.1","@astrojs/solid-js@2.0.2","@astrojs/node@5.0.2","@astrojs/netlify@2.1.1","astro@2.0.5","@astrojs/mdx@0.16.0","@astrojs/lit@1.1.2","@astrojs/image@0.14.0","create-astro@2.0.2","astro@2.0.4","@astrojs/vue@2.0.1","@astrojs/turbolinks@0.1.5","@astrojs/tailwind@3.0.1","@astrojs/svelte@2.0.1","@astrojs/solid-js@2.0.1","@astrojs/sitemap@1.0.1","@astrojs/react@2.0.2","@astrojs/prefetch@0.1.2","@astrojs/preact@2.0.1","@astrojs/netlify@2.1.0","@astrojs/mdx@0.15.2","@astrojs/lit@1.1.1","@astrojs/image@0.13.1","@astrojs/cloudflare@6.1.1","@astrojs/alpinejs@0.1.3","astro@2.0.2","@astrojs/react@2.0.1","@astrojs/node@5.0.1","@astrojs/mdx@0.15.1","@astrojs/markdown-remark@2.0.1","@astrojs/cloudflare@6.1.0","astro@2.0.1","create-astro@2.0.1","create-astro@2.0.0","astro@2.0.0","@astrojs/webapi@2.0.0","@astrojs/vue@2.0.0","@astrojs/vercel@3.0.0","@astrojs/telemetry@2.0.0","@astrojs/tailwind@3.0.0","@astrojs/svelte@2.0.0","@astrojs/solid-js@2.0.0","@astrojs/rss@2.1.0","@astrojs/react@2.0.0","@astrojs/prism@2.0.0","@astrojs/preact@2.0.0","@astrojs/partytown@1.0.3","@astrojs/node@5.0.0","@astrojs/netlify@2.0.0","@astrojs/mdx@0.15.0","@astrojs/markdown-remark@2.0.0","@astrojs/lit@1.1.0","@astrojs/image@0.13.0","@astrojs/deno@4.0.0","@astrojs/cloudflare@6.0.0","create-astro@2.0.0-beta.1","astro@2.0.0-beta.4","@astrojs/webapi@2.0.0-beta.1","@astrojs/tailwind@3.0.0-beta.2","@astrojs/svelte@2.0.0-beta.3","@astrojs/partytown@1.0.3-beta.1","@astrojs/netlify@2.0.0-beta.4","@astrojs/image@0.12.2-beta.1","@astrojs/rss@2.1.0-beta.0","astro@2.0.0-beta.3","@astrojs/svelte@2.0.0-beta.2","@astrojs/netlify@2.0.0-beta.3","@astrojs/image@0.12.2-beta.0","create-astro@2.0.0-beta.0","astro@2.0.0-beta.2","@astrojs/webapi@2.0.0-beta.0","@astrojs/vue@2.0.0-beta.1","@astrojs/vercel@3.0.0-beta.1","@astrojs/telemetry@2.0.0-beta.0","@astrojs/tailwind@3.0.0-beta.1","@astrojs/svelte@2.0.0-beta.1","@astrojs/solid-js@2.0.0-beta.0","@astrojs/react@2.0.0-beta.0","@astrojs/prism@2.0.0-beta.0","@astrojs/preact@2.0.0-beta.0","@astrojs/partytown@1.0.3-beta.0","@astrojs/node@5.0.0-beta.1","@astrojs/netlify@2.0.0-beta.2","@astrojs/mdx@1.0.0-beta.2","@astrojs/markdown-remark@2.0.0-beta.2","@astrojs/lit@1.0.2-beta.0","@astrojs/image@1.0.0-beta.2","@astrojs/deno@4.0.0-beta.2","@astrojs/cloudflare@6.0.0-beta.1","astro@2.0.0-beta.1","@astrojs/tailwind@3.0.0-beta.0","@astrojs/netlify@2.0.0-beta.1","@astrojs/mdx@0.15.0-beta.1","@astrojs/markdown-remark@2.0.0-beta.1","@astrojs/image@0.13.0-beta.1","@astrojs/deno@4.0.0-beta.1","astro@1.9.0","astro@2.0.0-beta.0","@astrojs/vue@2.0.0-beta.0","@astrojs/vercel@3.0.0-beta.0","@astrojs/svelte@2.0.0-beta.0","@astrojs/node@5.0.0-beta.0","@astrojs/netlify@2.0.0-beta.0","@astrojs/mdx@0.15.0-beta.0","@astrojs/markdown-remark@2.0.0-beta.0","@astrojs/image@0.13.0-beta.0","@astrojs/deno@4.0.0-beta.0","@astrojs/cloudflare@6.0.0-beta.0","astro@1.8.0","@astrojs/vercel@2.4.0","@astrojs/rss@2.0.0","@astrojs/mdx@0.14.0","@astrojs/markdown-remark@1.2.0","astro@1.7.2","astro@1.7.1","create-astro@1.2.4","astro@1.7.0","@astrojs/node@4.0.0","@astrojs/netlify@1.3.0","@astrojs/mdx@0.13.0","@astrojs/deno@3.0.0","@astrojs/cloudflare@5.0.0","@astrojs/rss@1.2.1","@astrojs/rss@1.2.0","@astrojs/vercel@2.3.6","astro@1.6.15","@astrojs/vue@1.2.2","@astrojs/node@3.1.1","@astrojs/mdx@0.12.2","astro@1.6.14","@astrojs/rss@1.1.0","@astrojs/netlify@1.2.2","@astrojs/deno@2.0.1","@astrojs/cloudflare@4.1.1","astro@1.6.13","@astrojs/vercel@2.3.5","@astrojs/mdx@0.12.1","@astrojs/image@0.12.1","astro@1.6.12","@astrojs/image@0.12.0","astro@1.6.11","@astrojs/tailwind@2.1.3","@astrojs/partytown@1.0.2","@astrojs/mdx@0.12.0","@astrojs/cloudflare@4.1.0","astro@1.6.10","@astrojs/node@3.1.0","@astrojs/image@0.11.6","create-astro@1.2.3","astro@1.6.9","@astrojs/vercel@2.3.4","@astrojs/image@0.11.5","astro@1.6.8","@astrojs/solid-js@1.2.3","astro@1.6.7","@astrojs/image@0.11.4","astro@1.6.6","@astrojs/mdx@0.11.6","@astrojs/image@0.11.3","create-astro@1.2.2","astro@1.6.5","@astrojs/netlify@1.2.1","@astrojs/image@0.11.2","@astrojs/cloudflare@4.0.1","astro@1.6.4","@astrojs/node@3.0.0","@astrojs/deno@2.0.0","@astrojs/cloudflare@4.0.0","astro@1.6.3","@astrojs/tailwind@2.1.2","@astrojs/prism@1.0.2","@astrojs/prefetch@0.1.1","@astrojs/markdown-component@1.0.2","@astrojs/image@0.11.1","create-astro@1.2.1","astro@1.6.2","@astrojs/webapi@1.1.1","@astrojs/vercel@2.3.3","astro@1.6.1","@astrojs/solid-js@1.2.2","@astrojs/react@1.2.2","@astrojs/cloudflare@3.1.2","create-astro@1.2.0","astro@1.6.0","@astrojs/rss@1.0.3","@astrojs/node@2.0.2","@astrojs/cloudflare@3.1.1","astro@1.5.3","@astrojs/vercel@2.3.2","@astrojs/mdx@0.11.5","@astrojs/image@0.11.0","astro@1.5.2","@astrojs/vue@1.2.1","@astrojs/vercel@2.3.1","@astrojs/prefetch@0.1.0","astro@1.5.1","@astrojs/vue@1.2.0","@astrojs/vercel@2.3.0","@astrojs/tailwind@2.1.1","@astrojs/solid-js@1.2.1","@astrojs/react@1.2.1","@astrojs/node@2.0.1","astro@1.5.0","@astrojs/vercel@2.2.0","@astrojs/tailwind@2.1.0","@astrojs/svelte@1.0.2","@astrojs/solid-js@1.2.0","@astrojs/node@2.0.0","@astrojs/netlify@1.2.0","@astrojs/image@0.10.0","@astrojs/deno@1.2.0","@astrojs/cloudflare@3.1.0","astro@1.4.7","@astrojs/vercel@2.1.1","@astrojs/react@1.2.0","@astrojs/preact@1.2.0","@astrojs/image@0.9.3","astro@1.4.6","@astrojs/prefetch@0.0.8","astro@1.4.5","@astrojs/solid-js@1.1.1","@astrojs/partytown@1.0.1","@astrojs/image@0.9.2","@astrojs/cloudflare@3.0.0","astro@1.4.4","astro@1.4.3","@astrojs/mdx@0.11.4","@astrojs/image@0.9.1","astro@1.4.2","astro@1.4.1","@astrojs/image@0.9.0","astro@1.4.0","@astrojs/vue@1.1.0","@astrojs/vercel@2.1.0","@astrojs/telemetry@1.0.1","@astrojs/tailwind@2.0.2","@astrojs/svelte@1.0.1","@astrojs/rss@1.0.2","@astrojs/preact@1.1.1","@astrojs/node@1.1.0","@astrojs/netlify@1.1.0","@astrojs/mdx@0.11.3","@astrojs/markdown-remark@1.1.3","@astrojs/image@0.8.1","@astrojs/deno@1.1.0","@astrojs/cloudflare@2.1.0","create-astro@1.1.0","astro@1.3.1","@astrojs/webapi@1.1.0","@astrojs/vercel@2.0.1","@astrojs/mdx@0.11.2","@astrojs/image@0.8.0","astro@1.3.0","@astrojs/image@0.7.1","@astrojs/netlify@1.0.4","create-astro@1.0.2","astro@1.2.8","@astrojs/react@1.1.4","@astrojs/markdown-remark@1.1.2","@astrojs/cloudflare@2.0.0","astro@1.2.7","astro@1.2.6","astro@1.2.5","@astrojs/tailwind@2.0.1","astro@1.2.4","@astrojs/tailwind@2.0.0","@astrojs/react@1.1.3","astro@1.2.3","@astrojs/tailwind@1.0.1","@astrojs/netlify@1.0.3","astro@1.2.2","@astrojs/vue@1.0.2","@astrojs/vercel@2.0.0","@astrojs/rss@1.0.1","astro@1.2.1","@astrojs/image@0.7.0","astro@1.2.0","astro@1.1.8","@astrojs/react@1.1.2","@astrojs/image@0.6.1","astro@1.1.7","@astrojs/preact@1.1.0","@astrojs/image@0.6.0","astro@1.1.6","@astrojs/vue@1.0.1","@astrojs/image@0.5.1","@astrojs/alpinejs@0.1.2","astro@1.1.5","astro@1.1.4","@astrojs/mdx@0.11.1","@astrojs/image@0.5.0","astro@1.1.3","@astrojs/vercel@1.0.2","@astrojs/node@1.0.1","@astrojs/netlify@1.0.2","@astrojs/mdx@0.11.0","@astrojs/image@0.4.0","@astrojs/deno@1.0.1","@astrojs/cloudflare@1.0.2","astro@1.1.2","@astrojs/react@1.1.1","@astrojs/mdx@0.10.3","@astrojs/markdown-remark@1.1.1","@astrojs/lit@1.0.1","@astrojs/image@0.3.7","astro@1.1.1","@astrojs/alpinejs@0.1.1","create-astro@1.0.1","astro@1.1.0","@astrojs/solid-js@1.1.0","@astrojs/react@1.1.0","@astrojs/mdx@0.10.2","@astrojs/markdown-remark@1.1.0","create-astro@1.0.1-next.0","astro@1.1.0-next.0","@astrojs/react@1.1.0-next.0","@astrojs/mdx@0.10.2-next.0","@astrojs/markdown-remark@1.1.0-next.0","astro@1.0.9","astro@1.0.8","@astrojs/mdx@0.10.1","astro@1.0.7","@astrojs/vercel@1.0.1","@astrojs/image@0.3.6","@astrojs/alpinejs@0.1.0","astro@1.0.6","@astrojs/mdx@0.10.0","astro@1.0.5","astro@1.0.4","@astrojs/mdx@0.9.0","astro@1.0.3","@astrojs/prism@1.0.1","@astrojs/prefetch@0.0.7","@astrojs/preact@1.0.2","@astrojs/netlify@1.0.1","@astrojs/mdx@0.8.3","@astrojs/image@0.3.4","astro@1.0.2","@astrojs/preact@1.0.1","@astrojs/mdx@0.8.2","@astrojs/cloudflare@1.0.1","astro@1.0.1","@astrojs/markdown-component@1.0.1","@astrojs/image@0.3.3","create-astro@1.0.0","astro@1.0.0","@astrojs/webapi@1.0.0","@astrojs/vue@1.0.0","@astrojs/vercel@1.0.0","@astrojs/telemetry@1.0.0","@astrojs/tailwind@1.0.0","@astrojs/svelte@1.0.0","@astrojs/solid-js@1.0.0","@astrojs/sitemap@1.0.0","@astrojs/rss@1.0.0","@astrojs/react@1.0.0","@astrojs/prism@1.0.0","@astrojs/preact@1.0.0","@astrojs/partytown@1.0.0","@astrojs/node@1.0.0","@astrojs/netlify@1.0.0","@astrojs/mdx@0.8.1","@astrojs/markdown-remark@1.0.0","@astrojs/markdown-component@1.0.0","@astrojs/lit@1.0.0","@astrojs/deno@1.0.0","@astrojs/cloudflare@1.0.0","astro@1.0.0-rc.8","@astrojs/mdx@0.8.0","@astrojs/cloudflare@0.5.0","create-astro@0.15.1","create-astro@0.15.0","astro@1.0.0-rc.7","@astrojs/react@0.4.3","@astrojs/mdx@0.7.0","@astrojs/markdown-remark@0.14.1","@astrojs/image@0.3.2","astro@1.0.0-rc.6","astro@1.0.0-rc.5","@astrojs/mdx@0.6.0","@astrojs/image@0.3.1","astro@1.0.0-rc.4","@astrojs/prism@0.7.0","@astrojs/mdx@0.5.0","@astrojs/markdown-remark@0.14.0","astro@1.0.0-rc.3","@astrojs/mdx@0.4.0","@astrojs/markdown-component@0.2.1","create-astro@0.14.3","@astrojs/mdx@0.3.1","astro@1.0.0-rc.2","@astrojs/vercel@0.4.0","@astrojs/svelte@0.5.1","@astrojs/node@0.2.1","@astrojs/image@0.3.0","@astrojs/cloudflare@0.4.0","create-astro@0.14.2","astro@1.0.0-rc.1","@astrojs/vue@0.5.0","@astrojs/vercel@0.3.0","@astrojs/tailwind@0.2.5","@astrojs/svelte@0.5.0","@astrojs/sitemap@0.3.0","@astrojs/prefetch@0.0.6","@astrojs/partytown@0.1.9","@astrojs/node@0.2.0","@astrojs/netlify@0.5.0","@astrojs/mdx@0.3.0","@astrojs/markdown-remark@0.13.0","@astrojs/markdown-component@0.2.0","@astrojs/lit@0.3.2","@astrojs/image@0.2.0","@astrojs/deno@0.2.0","@astrojs/cloudflare@0.3.0","astro@0.0.0-rc-20220726043527","@astrojs/vue@0.0.0-rc-20220726043527","@astrojs/vercel@0.0.0-rc-20220726043527","@astrojs/tailwind@0.0.0-rc-20220726043527","@astrojs/svelte@0.0.0-rc-20220726043527","@astrojs/sitemap@0.0.0-rc-20220726043527","@astrojs/prefetch@0.0.0-rc-20220726043527","@astrojs/partytown@0.0.0-rc-20220726043527","@astrojs/node@0.0.0-rc-20220726043527","@astrojs/netlify@0.0.0-rc-20220726043527","@astrojs/mdx@0.0.0-rc-20220726043527","@astrojs/markdown-remark@0.0.0-rc-20220726043527","@astrojs/markdown-component@0.0.0-rc-20220726043527","@astrojs/lit@0.0.0-rc-20220726043527","@astrojs/image@0.0.0-rc-20220726043527","@astrojs/deno@0.0.0-rc-20220726043527","@astrojs/cloudflare@0.0.0-rc-20220726043527","astro@0.0.0-rc-20220725043302","@astrojs/vue@0.0.0-rc-20220725043302","@astrojs/vercel@0.0.0-rc-20220725043302","@astrojs/tailwind@0.0.0-rc-20220725043302","@astrojs/svelte@0.0.0-rc-20220725043302","@astrojs/sitemap@0.0.0-rc-20220725043302","@astrojs/prefetch@0.0.0-rc-20220725043302","@astrojs/partytown@0.0.0-rc-20220725043302","@astrojs/node@0.0.0-rc-20220725043302","@astrojs/netlify@0.0.0-rc-20220725043302","@astrojs/mdx@0.0.0-rc-20220725043302","@astrojs/markdown-remark@0.0.0-rc-20220725043302","@astrojs/markdown-component@0.0.0-rc-20220725043302","@astrojs/lit@0.0.0-rc-20220725043302","@astrojs/image@0.0.0-rc-20220725043302","@astrojs/deno@0.0.0-rc-20220725043302","@astrojs/cloudflare@0.0.0-rc-20220725043302","astro@0.0.0-rc-20220722032928","@astrojs/vue@0.0.0-rc-20220722032928","@astrojs/vercel@0.0.0-rc-20220722032928","@astrojs/tailwind@0.0.0-rc-20220722032928","@astrojs/svelte@0.0.0-rc-20220722032928","@astrojs/sitemap@0.0.0-rc-20220722032928","@astrojs/prefetch@0.0.0-rc-20220722032928","@astrojs/partytown@0.0.0-rc-20220722032928","@astrojs/node@0.0.0-rc-20220722032928","@astrojs/netlify@0.0.0-rc-20220722032928","@astrojs/mdx@0.0.0-rc-20220722032928","@astrojs/markdown-remark@0.0.0-rc-20220722032928","@astrojs/markdown-component@0.0.0-rc-20220722032928","@astrojs/lit@0.0.0-rc-20220722032928","@astrojs/image@0.0.0-rc-20220722032928","@astrojs/deno@0.0.0-rc-20220722032928","@astrojs/cloudflare@0.0.0-rc-20220722032928","astro@0.0.0-rc-20220721064837","@astrojs/vue@0.0.0-rc-20220721064837","@astrojs/vercel@0.0.0-rc-20220721064837","@astrojs/svelte@0.0.0-rc-20220721064837","@astrojs/node@0.0.0-rc-20220721064837","@astrojs/netlify@0.0.0-rc-20220721064837","@astrojs/mdx@0.0.0-rc-20220721064837","@astrojs/markdown-component@0.0.0-rc-20220721064837","@astrojs/image@0.0.0-rc-20220721064837","@astrojs/deno@0.0.0-rc-20220721064837","@astrojs/cloudflare@0.0.0-rc-20220721064837","astro@0.0.0-rc-20220720044556","@astrojs/image@0.0.0-rc-20220720164940","astro@0.0.0-rc-20220719055619","@astrojs/vue@0.0.0-rc-20220719055619","@astrojs/svelte@0.0.0-rc-20220719055619","@astrojs/image@0.0.0-rc-20220719055619","create-astro@0.14.1","astro@1.0.0-beta.73","@astrojs/vue@0.4.1","@astrojs/telemetry@0.4.1","@astrojs/svelte@0.4.1","@astrojs/solid-js@0.4.1","@astrojs/rss@0.2.2","@astrojs/react@0.4.2","@astrojs/prism@0.6.1","@astrojs/preact@0.5.2","@astrojs/mdx@0.2.1","@astrojs/markdown-remark@0.12.0","@astrojs/image@0.1.3","astro@1.0.0-beta.72","@astrojs/react@0.4.1","@astrojs/preact@0.5.1","astro@1.0.0-beta.71","@astrojs/markdown-remark@0.11.7","create-astro@0.14.0","astro@1.0.0-beta.70","@astrojs/vue@0.4.0","@astrojs/telemetry@0.4.0","@astrojs/svelte@0.4.0","@astrojs/solid-js@0.4.0","@astrojs/rss@0.2.1","@astrojs/react@0.4.0","@astrojs/prism@0.6.0","@astrojs/preact@0.5.0","@astrojs/mdx@0.2.0","@astrojs/markdown-remark@0.11.6","astro@1.0.0-beta.69","@astrojs/vue@0.3.1","@astrojs/vercel@0.2.6","@astrojs/telemetry@0.3.1","@astrojs/tailwind@0.2.4","@astrojs/svelte@0.3.1","@astrojs/solid-js@0.3.1","@astrojs/sitemap@0.2.6","@astrojs/react@0.3.1","@astrojs/prefetch@0.0.5","@astrojs/preact@0.4.1","@astrojs/partytown@0.1.8","@astrojs/node@0.1.6","@astrojs/netlify@0.4.10","@astrojs/mdx@0.1.1","@astrojs/markdown-remark@0.11.5","@astrojs/image@0.1.2","@astrojs/deno@0.1.10","@astrojs/cloudflare@0.2.4","create-astro@0.13.0","astro@1.0.0-beta.66","@astrojs/vue@0.3.0","@astrojs/telemetry@0.3.0","@astrojs/svelte@0.3.0","@astrojs/solid-js@0.3.0","@astrojs/react@0.3.0","@astrojs/prism@0.5.0","@astrojs/preact@0.4.0","@astrojs/mdx@0.1.0","@astrojs/markdown-remark@0.11.4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-126365.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"}]}