Reflected XSS via unescaped slot names in @astrojs/solid-js.

MediumGHSA-jmv2-qgxf-f99528 Oct · yesterday
Source

Does it affect you?

0/4All must holdTicks stay in this browser
Conditions read by Claude. The sources remain the reference.Maintainer advisory

Timeline

28 Oct
16 hahead of the GitHub database so far
  1. Published by the maintainer in withastro/astro28 Oct, 19:27 UTC
  2. Seen by Patchwire +29 min28 Oct, 19:56 UTC
  3. Not in the GitHub database 16 h later29 Oct, 11:55 UTC
@astrojs/solid-js7.1.2

Versions of @astrojs/solid-js

7.x
safe 7.1.2
AffectedSafe

Packages

@astrojs/solid-js

Stacks

Not part of a tracked stack.