Astro 6 lifecycle

Current status

standard supportlow

Astro 6 is currently in standard support.

Security: 6 tracked advisories affecting this line. Details below — lifecycle and vulnerability status are separate.

Official lifecycle source: Astro npm releases

Support phase
standard support
End of life
Not officially published
Latest release
6.0.1
Released
10 Mar 2026

At a glance

Version line
6
Initial release
10 Mar 2026
Lifecycle phase
standard support
Latest stable
6.0.1
Latest release date
10 Mar 2026
EOL
Not officially published
Risk
low
Releases tracked
41

Lifecycle timeline

Phases from published LifecyclePeriod records. Missing phases are not inferred.

  1. Release

    10 Mar 2026

  2. standard supportcurrent

    10 Mar 2026 → —

    Source: Astro npm releases

Astro 6 is currently in standard support.

Upgrade options

Newer supported Astro version lines from CompatHub lifecycle data. Compatibility and security context use existing evidence only.

You are on Astro 6

Supported

Supported upgrade options

Open full upgrade planner for Astro 6

Security

Advisories affecting Astro 6 (OSV.dev evidence). Known exploited status, due dates, and ransomware use from CISA KEV when matched.

Known vulnerabilities
6
Known exploited
0
Highest CVSS
7.5
  • CVE-2026-54299GHSA-2pvr-wf23-7pc7

    Astro: Host header SSRF in prerendered error page fetch

    CVSS:
    7.5 (high) · NVD
    CWE:
    CWE-20, CWE-918
    Affected:
    <6.4.6
    Fixed in:
    6.4.6
    Source:
    OSV source · Advisory
  • CVE-2026-50146GHSA-8hv8-536x-4wqp

    Astro: Reflected XSS via unescaped slot name

    CVSS:
    6.1 (moderate) · NVD
    CWE:
    CWE-80
    Affected:
    <6.3.3
    Fixed in:
    6.3.3
    Source:
    OSV source · Advisory
  • CVE-2026-59729GHSA-f48w-9m4c-m7f5

    Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298)

    CVSS:
    5.1 (moderate) · NVD
    CWE:
    CWE-79
    Affected:
    <7.0.6
    Fixed in:
    7.0.6
    Source:
    OSV source · Advisory
  • CVE-2026-54298GHSA-jrpj-wcv7-9fh9

    Astro: XSS via Unescaped Attribute Names in Spread Props

    Affected:
    <6.4.6
    Fixed in:
    6.4.6
    Source:
    OSV source · Advisory
  • CVE-2026-45028GHSA-xr5h-phrj-8vxv

    Astro: Server island encrypted parameters vulnerable to cross-component replay

    Affected:
    <6.1.10
    Fixed in:
    6.1.10
    Source:
    OSV source · Advisory
  • CVE-2026-41067GHSA-j687-52p2-xcff

    Astro: XSS in define:vars via incomplete </script> tag sanitization

    Affected:
    <6.1.6
    Fixed in:
    6.1.6
    Source:
    OSV source · Advisory

Latest release

6.0.1

Released 10 Mar 2026 · stable

https://registry.npmjs.org/astro/6.0.1

Previous releases

  • 6.0.2

    10 Mar 2026

  • 6.0.3

    11 Mar 2026

  • 6.0.0

    10 Mar 2026

Release history

41 concrete releases tracked for this line.

VersionRelease dateChannelSource
6.0.010 Mar 2026stableSource
6.0.110 Mar 2026stableSource
6.0.210 Mar 2026stableSource
6.0.311 Mar 2026stableSource
6.0.412 Mar 2026stableSource
6.0.516 Mar 2026stableSource
6.0.618 Mar 2026stableSource
6.0.719 Mar 2026stableSource
6.0.820 Mar 2026stableSource
6.1.026 Mar 2026stableSource
6.1.126 Mar 2026stableSource
6.1.230 Mar 2026stableSource
6.1.31 Apr 2026stableSource
6.1.46 Apr 2026stableSource
6.1.58 Apr 2026stableSource
6.1.613 Apr 2026stableSource
6.1.715 Apr 2026stableSource
6.1.818 Apr 2026stableSource
6.1.922 Apr 2026stableSource
6.1.1028 Apr 2026stableSource
6.2.030 Apr 2026stableSource
6.2.130 Apr 2026stableSource
6.2.24 May 2026stableSource
6.3.07 May 2026stableSource
6.3.17 May 2026stableSource

Release activity

Total releases
41
Last 30 days
0
Last 90 days
4
Avg. interval
~3 days
Most recent
10 Mar 2026

Should I use this version?

Suitable for new deployments

Astro 6 is currently supported (standard support).

Version comparison

Compact comparison against the nearest relevant release lines.

67
Statusstandard supportstandard support
Latest release6.0.07.2.8
EOLNot publishedNot published
Risklowlow

Compatibility

Evidence-backed compatibility results involving Astro 6. Only combinations CompatHub can evaluate from upstream sources are listed.

Open Compatibility Explorer →

Sources

Where this information comes from.

Lifecycle sources

Release sources

Data coverage

Last checked = last successful upstream check. Latest source update = when upstream content last changed.

Releases tracked
41
Lifecycle periods
1
EOL
Not officially published
Provenance records
2
Data last checked
2 Sept 2026
Latest source update
2 Sept 2026

EOL: Not officially published

Other Astro versions