CVE-2026-29772 | withastro up to 9.x POST /_server-islands/ JSON.parse allocation of resources (GHSA-3rmj-9m5h-8fpv / EUVD-2026-14962)

A vulnerability was found in withastro astro up to 9.x. It has been classified as problematic. This vulnerability affects the function JSON.parse of the file /_server-islands/ of the component POST Handler. This manipulation causes allocation of resources. This vulnerability is handled as CVE-2026-29772. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.