References https://nvd.nist.gov/vuln/detail/CVE-2025-58179 https://github.com/withastro/astro/security/advisories/GHSA-qpr4-c339-7vq8 https://security.snyk.io/vuln/SNYK-JS-ASTROJSCLOUDFLARE-12496482 https://www.miggo.io/vulnerability-database/cve/CVE-2025-58179 https://github.com/projectdiscovery/nuclei-templates/issues/13219 https://www.anquanke.com/post/id/311959 https://cn-sec.com/archives/4448918.html https://access.redhat.com/security/cve/cve-2025-58179
Related VulnerabilitiesPoCCVE-2026-25545: Astro SSR - Server-Side Request ForgeryPoCCVE-2025-54793: Astro SSR - Open RedirectPoCCVE-2025-55303: Astro - Unauthorized Third-Party Image AccessPoCCVE-2024-56159: Astro - Information DisclosureCodeastro Real_estate_management_system注入漏洞(CVE-2025-14899)Codeastro Real_estate_management_system注入漏洞(CVE-2025-14897)Astro Web Framework Cloudflare /_image 服务器端请求伪造漏洞(CVE-2025-58179)PoCCVE-2025-64525: Astro - Broken Access ControlPoCCVE-2025-64764: Astro - Reflected XSS via server islands feature(CVE-2025-64764) Astro服务器岛功能反射型XSS漏洞CodeAstro Gym Management System SQL注入漏洞