CVE-2025-64764 — Astro is a web framework. Prior to version 5.15.8, a reflected XSS vulnerability is present when the server islands feature is used in the targeted application, regardless of what was intended by the — CVE Database · The Intelligence Room