Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
astrojs/underscore-redirects can be used for malicious redirects
published 19 days ago
Summary
The astrojs/underscore-redirects package had two security weaknesses that could let a bad actor change where visitors are sent. This could expose users to unwanted or harmful websites. Updating to version 3.6.5-tuxcare.9 resolves the issue, so apply the update as soon as possible.
What to do
- Update astrojs @astrojs/underscore-redirects to version 3.6.5-tuxcare.9.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | astrojs | @astrojs/underscore-redirects |
>= 3.6.5-tuxcare.0, < 3.6.5-tuxcare.9 Fix: upgrade to 3.6.5-tuxcare.9
|
Original advisory text
TuxCare security update for @astrojs/underscore-redirects (2 CVEs)
TuxCare rebuilt @astrojs/underscore-redirects to address 2 CVEs. Fixed in 3.6.5-tuxcare.9.
Timeline
Published16 Oct 2026
Updated16 Oct 2026
First seen16 Oct 2026
Sources
CLSA-2026-1792161801 · OSV
Track software like this
Free during beta