Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-f73c-5tds-97ds
Vulnerability ID VCID-f73c-5tds-97ds
Aliases CVE-2025-64525
GHSA-hr2q-hp5q-x767
Summary Astro is a web framework. In Astro versions 2.16.0 up to but excluding 5.15.5 which utilizeon-demand rendering, request headers `x-forwarded-proto` and `x-forwarded-port` are insecurely used, without sanitization, to build the URL. This has several consequences, the most important of which are: middleware-based protected route bypass (only via `x-forwarded-proto`), DoS via cache poisoning (if a CDN is present), SSRF (only via `x-forwarded-proto`), URL pollution (potential SXSS, if a CDN is present), and WAF bypass. Version 5.15.5 contains a patch.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-918 Server-Side Request Forgery (SSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.01323 https://api.first.org/data/v1/epss?cve=CVE-2025-64525
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-hr2q-hp5q-x767
cvssv3.1 6.5 https://github.com/withastro/astro
generic_textual MODERATE https://github.com/withastro/astro
cvssv3.1 6.5 https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
generic_textual MODERATE https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
ssvc Track https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
cvssv3.1 6.5 https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
generic_textual MODERATE https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
ssvc Track https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
cvssv3.1 6.5 https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
generic_textual MODERATE https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
ssvc Track https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
cvssv3.1 6.5 https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
cvssv3.1_qr MODERATE https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
generic_textual MODERATE https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
ssvc Track https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
cvssv3.1 6.5 https://nvd.nist.gov/vuln/detail/CVE-2025-64525
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2025-64525
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-64525
https://github.com/withastro/astro
CVE-2025-64525 https://nvd.nist.gov/vuln/detail/CVE-2025-64525
dafbb1ba29912099c4faff1440033edc768af8b4 https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
GHSA-hr2q-hp5q-x767 https://github.com/advisories/GHSA-hr2q-hp5q-x767
GHSA-hr2q-hp5q-x767 https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
node.ts#L121 https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
node.ts#L97 https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://github.com/withastro/astro
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-13T16:15:07Z/ Found at https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L121
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-13T16:15:07Z/ Found at https://github.com/withastro/astro/blob/970ac0f51172e1e6bff4440516a851e725ac3097/packages/astro/src/core/app/node.ts#L97
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-13T16:15:07Z/ Found at https://github.com/withastro/astro/commit/dafbb1ba29912099c4faff1440033edc768af8b4
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-13T16:15:07Z/ Found at https://github.com/withastro/astro/security/advisories/GHSA-hr2q-hp5q-x767
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2025-64525
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.8031
EPSS Score 0.01323
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:57:26.129056+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/64xxx/CVE-2025-64525.json 38.6.0