Skip to content
Vulnerability intelligence

CVE-2026-73422: Astro inject HTML or JavaScript

Escaping one dangerous character did not protect the CSS layer inside the page. The advisory says exposure is limited.

Astro 2026