Detections
Analytics
SCA: security update for astro (GHSA-5ff5-9fcw-vg88)
medium Tenable Self-Hosted Container Security Plugin ID 435574
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Astro is a web framework. Prior to version 5.14.2, Astro reflects the value in `X-Forwarded-Host` in
output when using `Astro.url` without any validation. It is common for web servers such as nginx to route
requests via the `Host` header, and forward on other request headers. As such as malicious request can be
sent with both a `Host` header and an `X-Forwarded-Host` header where the values do not match and the
`X-Forwarded-Host` header is malicious. Astro will then return the malicious value. This could result in
any usages of the `Astro.url` value in code being manipulated by a request. For example if a user follows
guidance and uses `Astro.url` for a canonical link the canonical link can be manipulated to another site.
It is theoretically possible that the value could also be used as a login/registration or other form URL
as well, resulting in potential redirecting of login credentials to a malicious party. As this is a per-
request attack vector the surface area would only be to the malicious user until one considers that having
a caching proxy is a common setup, in which case any page which is cached could persist the malicious
value for subsequent users. Many other frameworks have an allowlist of domains to validate against, or do
not have a case where the headers are reflected to avoid such issues. This could affect anyone using Astro
in an on-demand/dynamic rendering mode behind a caching proxy. Version 5.14.2 contains a fix for the
issue. (CVE-2025-61925)
See Also
Plugin Details
Severity: Medium
ID: 435574
Version: Revision 1.7
Type: Local
Family: SCA Checks
Published: 10/11/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.1
Percentile: 7.68
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P
CVSS Score Source: CVE-2025-61925
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.9
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/10/2025
Vulnerability Publication Date: 10/10/2025
Reference Information
CVE: CVE-2025-61925