CVE-2026-64682

Vendor

NauelG

Product

astro-blocks

CVSS v3.1

9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-321, CWE-798

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 38
   CVE NVD 17h ago

   AstroBlocks is a block-first CMS for Astro projects.

   AstroBlocks is a block-first CMS for Astro projects. Prior to version 3.4.0, admin session tokens can be forged due to a hard-coded fallback JWT secret and a mismatched environment variable name. An attacker who knows the public…

   CVSS 9.8 Fix available CVE-2026-64682 NauelG