A vulnerability described as problematic has been identified in withastro astro up to 5.15.8. This issue affects the function
isRemoteAllowed of the component Image Optimization Endpoint. Executing manipulation can lead to cross site scripting.
The identification of this vulnerability is CVE-2025-65019. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is recommended.