medium5.3
CVE-2026-33769
Astro: Remote allowlist bypass via unanchored matchPathname wildcard
Impact
Astro is a web framework. From version 2.10.10 to before version 5.18.1, this issue concerns Astro's remotePatterns path enforcement for remote URLs used by server-side fetchers such as the image optimization endpoint. The path matching logic for /* wildcards is unanchored, so a pathname that contains the allowed prefix later in the path can still match. As a result, an attacker can fetch paths outside the intended allowlisted prefix on an otherwise allowed host. This issue has been patched in version 5.18.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | astro | >= 2.10.10, < 5.18.1 | 5.18.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Astro | Astro | from 2.10.10 before 5.18.1 |