更新: 307 个文件 - 2026-03-27 02:33:52

07-framework-security/frameworks/astro/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `astro`
 - 分类: `frameworks`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `14`
-- 近 30 天新增/更新: `0`
-- 重点 Markdown 案例数: `14`
+- 总案例数: `15`
+- 近 30 天新增/更新: `1`
+- 重点 Markdown 案例数: `15`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `14`
-- 最近渲染时间: `2026-03-26T10:20:33+00:00`
+- 待人工/缺浏览器证据: `15`
+- 最近渲染时间: `2026-03-27T09:30:59+00:00`
 
 ## 目标约束
 
@@ -31,6 +31,7 @@
 
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
+| Astro: Remote allowlist bypass via unanchored matchPathname wildcard | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-03-26T19:01:26.420643Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2026-33769.md) |
 | Astro has an Authentication Bypass via Double URL Encoding, a bypass for CVE-2025-64765 | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T02:27:12.689316Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-66202.md) |
 | Astro Cloudflare adapter has Stored Cross-site Scripting vulnerability in /_image endpoint | `low` | `generated` | `triage-manual` | `synthetic` | `official` | `2025-11-27T08:33:26.119485Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-65019.md) |
 | Astro's middleware authentication checks based on url.pathname can be bypassed via url encoded values | `medium` | `generated` | `triage-manual` | `synthetic` | `official` | `2026-02-04T03:01:27.986221Z` | [link](/Users/x/websafe/07-framework-security/frameworks/astro/cases/astro-cve-2025-64765.md) |