`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
833 Dependabot PRs

Latest PR:
9 days ago

Unique Repositories:
349 repositories

Unique Repos (30 days):
25 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 11 months ago • updated 8 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published 3 months ago • updated 10 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs

RSS Feed

chore(deps): bump the patch-updates group across 1 directory with 12 updates

qwc-ch/Firefly #55

14.1.2 → 14.1.3 Patch PR

Closed 9 days ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 12 updates

xiyunyun/blog #1

14.1.2 → 14.1.3 Patch PR

Open 9 days ago 1 comment

build(deps): bump the minor-updates group with 8 updates

lstkilnotes/Harkoryx-Blog-Test2 #13

14.0.0 → 14.1.1 Minor PR

Closed 18 days ago 1 comment

Bump the minor-updates group across 1 directory with 8 updates

Aron1010/Aron-Blog #2

14.0.0 → 14.1.3 Minor PR

Closed 18 days ago 1 comment

build(deps): bump the minor-updates group with 7 updates

Jieice/JieDimension #2

14.0.0 → 14.1.1 Minor PR

Closed 21 days ago 1 comment

Bump the minor-updates group across 1 directory with 7 updates

0520xu/my-blog #4

14.0.0 → 14.1.0 Minor PR

Closed 22 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 9 updates

assagman/opencode #17

12.6.3 → 13.1.10 Major PR

Closed 22 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates

kooymansfinds/opencode #20

12.6.3 → 13.1.10 Major PR

Open 22 days ago 2 comments

Bump the minor-updates group across 1 directory with 7 updates

caramelpuddin9/caramelpudding-blog #6

14.0.0 → 14.1.0 Minor PR

Closed 23 days ago 2 comments

build(deps-dev): bump the astro group across 1 directory with 7 updates

sumup/sumup-developer #795

13.6.1 → 14.0.2 Major PR

Closed 23 days ago 2 comments

build(deps): bump the patch-updates group across 1 directory with 13 updates

qwc-ch/Firefly #43

14.0.0 → 14.0.2 Patch PR

Closed 23 days ago 2 comments

build(deps): bump the patch-updates group across 1 directory with 12 updates

AJ1E/Blog #4

14.0.0 → 14.0.1 Patch PR

Closed 24 days ago 1 comment

chore(deps): Bump the npm-dependencies group in /site with 2 updates

starhaven-io/macOSdb #570

13.7.0 → 14.0.0 Major PR

Closed 24 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

pellera9/opencode #9

12.6.3 → 13.1.10 Major PR

Open 25 days ago 2 comments

build(deps): bump the patch-updates group with 12 updates

nairain233/blog #22

14.0.0 → 14.0.1 Patch PR

Closed 25 days ago 1 comment

chore(deps): bump the npm-major group across 1 directory with 14 updates

cherinojoel-lang/hsb-boden #86

13.7.0 → 14.0.1 Major PR

Open 28 days ago 2 comments

build(deps-dev): bump the astro group across 1 directory with 6 updates

sumup/sumup-developer #785

13.6.1 → 14.0.1 Major PR

Closed 28 days ago 2 comments

Bump @astrojs/cloudflare from 13.7.0 to 14.0.0

more-please/more-stuff #524

13.7.0 → 14.0.0 Major PR

Closed about 1 month ago 1 comment

chore(deps): bump ws and @astrojs/cloudflare

elchiconube/generate-robots-txt #245

12.6.13 → 13.7.0 Major PR

Open about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

newgentdigital/website #64

12.6.13 → 13.7.0 Major PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 11 updates

hvrcharon1/opencode #2

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

tabrezahmed51/Cloudflare-agents_0118 #10

12.6.12 → 13.1.10 Major PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates

infrareactive/opencode #6

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 8 updates

kooymansfinds/opencode #17

12.6.3 → 13.1.10 Major PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates

fattain-naime/opencode #6

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 5 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates

ahliweb/sikesra #408

13.1.7 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 7 directories with 9 updates

reallyjustasquirrel/opencode #93

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 9 directories with 8 updates

shiva-manu/opencode #6

12.6.3 → 13.1.10 Major PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 14.0.0-alpha.0 to 14.0.0-beta.2

s5bug/aly.fish #270

14.0.0-alpha.0 → 14.0.0-beta.2

Open about 1 month ago 1 comment

build(deps-dev): bump the astro group with 4 updates

sumup/sumup-developer #763

13.6.1 → 13.7.0 Minor PR

Open about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 8 updates

neopilot-ai/neocode #26

12.6.6 → 13.1.10 Major PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 8 directories with 7 updates

daemon-blockint-tech/daemoncode #9

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 21 updates

tabrezahmed51/Cloudflare-agents_0118 #3

12.6.12 → 13.1.10 Major PR

Open about 1 month ago 2 comments

chore(deps): bump @astrojs/cloudflare from 12.6.3 to 13.1.10 in /packages/web in the npm_and_yarn group across 1 directory

btbowman/opencode #2

12.6.3 → 13.1.10 Major PR

Open about 1 month ago 3 comments

Bump @astrojs/cloudflare from 13.6.1 to 13.7.0 in /front

marsolab/saaskit #21

13.6.1 → 13.7.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the astro group with 3 updates

kiakiraki/blog #297

13.6.1 → 13.7.0 Minor PR

Open about 1 month ago 1 comment

Bump the minor-and-patch group across 1 directory with 19 updates

akshitkrnagpal/edgepush #26

13.5.1 → 13.6.1 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

CelestoAI/blog #4

12.6.12 → 13.1.10 Major PR

Open about 2 months ago 1 comment

chore(deps): Bump the minor-and-patch group with 10 updates

beelzer/dcln #79

13.5.4 → 13.6.1 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

heridotlife/heridotlife #157

13.5.0 → 13.6.0 Minor PR

Open about 2 months ago 4 comments

deps(site): bump the astro group across 1 directory with 3 updates

asfbay-bit/opchain #249

13.5.1 → 13.6.1 Minor PR

Closed about 2 months ago 5 comments

chore(deps): bump @astrojs/cloudflare from 12.6.13 to 13.6.0

nikolanovoselec/ai-news-digest #274

12.6.13 → 13.6.0 Major PR

Closed about 2 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.5.5 to 13.6.0

leowla/leowla.com #36

13.5.5 → 13.6.0 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the patch-minor group across 1 directory with 14 updates

tsaohsihsueh/Home #4

13.1.10 → 13.6.0 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 13 updates

fune-gaku/member-site-template-public #78

13.5.2 → 13.6.0 Minor PR

Closed about 2 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 6 directories with 9 updates

EmilynnJ/opencode #1

12.6.3 → 13.1.10 Major PR

Closed about 2 months ago 5 comments

Bump the all group with 9 updates

davidhouweling/guilty-spark #452

13.5.4 → 13.6.0 Minor PR

Open about 2 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.13 to 13.6.0 in /packages/marketing in the npm_and_yarn group across 1 directory

souravsspace/heybarakah.app #2

12.6.13 → 13.6.0 Major PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates

ahliweb/sikesra #364

13.1.7 → 13.1.10 Patch PR

Open about 2 months ago 5 comments

Bump @astrojs/cloudflare from 13.1.10 to 13.6.0

jrwnnnn/jrwnnnn-me #83

13.1.10 → 13.6.0 Minor PR

Open about 2 months ago 1 comment

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 509 (61.1%)

Merged 65 (7.8%)

Closed 231 (27.7%)

PR Types

Major 125 (15.0%)

Minor 170 (20.4%)

Patch 503 (60.4%)