Astro

astro.build ↗
B
MODERATE
25
Total CVEs
4
Crit / High
10
Medium
0%
Unpatched
60%
Patched
5.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
60%
Unpatched
0%
Under Review
24%
Pending
16%
✓ 15 patched ✗ 0 unpatched ~ 6 under review ⏳ 4 pending score
▸ Intelligence by Audience
PoC Available
9 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"astro" port:443
org:"Astro" http.status:200
Top EPSS (Exploitation Probability)
CVE-2025-64525 1.16% exploitation probability
CVE-2025-58179 0.83% exploitation probability
CVE-2025-29017 0.76% exploitation probability
CVE-2025-55303 0.64% exploitation probability
CVE-2026-102984 0.63% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
25
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
0%
Avg CVSS score
5.9
Security grade
B (MODERATE)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-15
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
GPT-6 Astra: A new generation of intelligence - OpenAI
OpenAI 2026-09-03
GNSS-enabled electronic devices have ‘cyber-security vulnerability’ - Practical Boat Owner
Practical Boat Owner 2026-03-04
▸ Recent CVEs showing 20 of 25
CVE IDSeverityPatchEPSSDate
CVE-2026-102984 ? N/A PATCH UNDER REVIEW 0.63% 2026-09-30
CVE-2026-102983 ? N/A PATCH UNDER REVIEW 0.54% 2026-09-30
CVE-2026-73425 3.7 LOW PATCH UNDER REVIEW 0.17% 2026-08-12
CVE-2026-73423 PoC ? N/A PATCH UNDER REVIEW 0.18% 2026-08-12
CVE-2026-73422 PoC ? N/A PATCH UNDER REVIEW 0.31% 2026-08-12
CVE-2025-66202 6.5 MEDIUM PATCHED / FIX AVAILABLE 0.31% 2025-12-08
CVE-2025-64765 6.9 MEDIUM PATCHED / FIX AVAILABLE 0.51% 2025-11-19
CVE-2025-64764 PoC 7.1 HIGH PATCHED / FIX AVAILABLE 0.49% 2025-11-19
CVE-2025-65019 5.4 MEDIUM PATCHED / FIX AVAILABLE 0.26% 2025-11-19
CVE-2025-64757 3.5 LOW PATCHED / FIX AVAILABLE 0.40% 2025-11-19
CVE-2025-64745 2.7 LOW PATCHED / FIX AVAILABLE 0.24% 2025-11-13
CVE-2025-64525 PoC 6.5 MEDIUM PATCHED / FIX AVAILABLE 1.16% 2025-11-13
CVE-2025-59837 7.2 HIGH PATCHED / FIX AVAILABLE 0.33% 2025-10-28
CVE-2025-61925 6.5 MEDIUM PATCH UNDER REVIEW 0.41% 2025-10-10
CVE-2025-58179 PoC 7.2 HIGH PATCHED / FIX AVAILABLE 0.83% 2025-09-04
CVE-2025-55303 PoC 6.9 MEDIUM PATCHED / FIX AVAILABLE 0.64% 2025-08-19
CVE-2025-55207 5.5 MEDIUM PATCHED / FIX AVAILABLE 0.57% 2025-08-15
CVE-2025-54793 PoC 5.5 MEDIUM PATCHED / FIX AVAILABLE 0.61% 2025-08-08
CVE-2025-29015 PoC ? N/A UNKNOWN / UNPATCHED 0.47% 2025-04-17
CVE-2025-29017 PoC ? N/A UNKNOWN / UNPATCHED 0.76% 2025-04-10
View all 25 CVEs for Astro →
▸Intel
Founded2021
Trust ScoreB — MODERATE
Max CVSS7.8
Last Updated2026-10-15
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
9 occurrences in Astro CVEs (36% of total)
CWE-79 ⓘ
9
CWE-352
Cross-Site Request Forgery (CSRF)
3 occurrences in Astro CVEs (12% of total)
CWE-352 ⓘ
3
CWE-22
Unknown Weakness Type
2 occurrences in Astro CVEs (8% of total)
CWE-22 ⓘ
2
CWE-918
Server-Side Request Forgery (SSRF)
2 occurrences in Astro CVEs (8% of total)
CWE-918 ⓘ
2
CWE-601
Open Redirect
2 occurrences in Astro CVEs (8% of total)
CWE-601 ⓘ
2
CWE-434
Unrestricted File Upload
1 occurrence in Astro CVEs (4% of total)
CWE-434 ⓘ
1
CWE-248
Unknown Weakness Type
1 occurrence in Astro CVEs (4% of total)
CWE-248 ⓘ
1
CWE-625
Unknown Weakness Type
1 occurrence in Astro CVEs (4% of total)
CWE-625 ⓘ
1
▸Company Profile

Astro is the company behind the Astro web framework, an open-source static site generator and full-stack framework designed for content-driven websites. Its significance in cybersecurity is primarily as a software supply chain component, with 24 tracked CVEs related to its dependencies and build tooling. The framework is widely used in the Jamstack ecosystem, making its security posture relevant for organizations relying on Astro-built sites.

▸Response Metrics
Est. MTTR ⓘ ~81 days (Average)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -71% better
CVE count 2026 vs 2025:  17 → 5 CVEs
Patch Speed ⓘ Excellent (<20% open)
0% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€96K
Est. GDPR High
€960K

Based on 0 critical CVEs, 0 CISA KEV, 16% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Astro B valtersit.com