CVE-2025-64765

CVE-2025-64765 is a medium-severity vulnerability in the Astro web framework, affecting versions prior to 5.15.8. It stems from a path normalization mismatch where Astro decodes URIs for routing but middleware does not, potentially allowing attackers to bypass validation checks for protected routes. The vulnerability has a CVSS score of 5.3, indicating a network-based attack with low complexity and potential for information disclosure. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.