SSRF via redirect following in Cloudflare image-binding-transform endpoint (incomplete fix for GHSA-qpr4) · Advisory · withastro/astro · GitHub
Security AdvisoryGHSA-qpr4LowAstro
Affected:
- Astro <= 13.1.6
Fixed in:
- 13.1.10
Referenced CVEs: CVE-2026-41321 · 2.2
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.