Update dependency astro to v5.18.2 - autoclosed#391
Update dependency astro to v5.18.2 - autoclosed#391mend-for-github-com[bot] wants to merge 1 commit into
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Vulnerable Library | Direct Library | Suggested Fix | Issue |
|---|---|---|---|---|---|---|
CVE-2026-54299Path to dependency file: /sources/video-javascript-multiparty_archiving/package.json Path to vulnerable library: /sources/video-javascript-multiparty_archiving/package.json Dependency Hierarchy: -> ❌ astro-5.18.2.tgz (Vulnerable Library) |
 High |
7.5 | Direct astro-5.18.2.tgz |
astro-5.18.2.tgz | https://github.com/withastro/astro.git - astro@6.4.6 | None |
CVE-2026-50146Path to dependency file: /sources/video-javascript-multiparty_archiving/package.json Path to vulnerable library: /sources/video-javascript-multiparty_archiving/package.json Dependency Hierarchy: -> ❌ astro-5.18.2.tgz (Vulnerable Library) |
High |
7.1 | Direct astro-5.18.2.tgz |
astro-5.18.2.tgz | https://github.com/withastro/astro.git - 6.3.3 | None |
CVE-2026-54298Path to dependency file: /sources/video-javascript-multiparty_archiving/package.json Path to vulnerable library: /sources/video-javascript-multiparty_archiving/package.json Dependency Hierarchy: -> ❌ astro-5.18.2.tgz (Vulnerable Library) |
 Medium |
4.2 | Direct astro-5.18.2.tgz |
astro-5.18.2.tgz | https://github.com/withastro/astro.git - 6.4.6 | None |
Base branch total remaining vulnerabilities: 59
Base branch commit: 1efca0f173ec6cadf69d7e825046862421e07342
Total libraries scanned: 1709
Scan token: 29d1b252ee1444e9b7a645eccc296c46