`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
805 Dependabot PRs

Latest PR:
about 18 hours ago

Unique Repositories:
331 repositories

Unique Repos (30 days):
39 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 5 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 6 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the patch-updates group across 1 directory with 3 updates

noonomyen/blog.noonomyen.com #43

12.6.0 → 12.6.1 Patch PR

Open 11 months ago

Bump the all group across 1 directory with 12 updates

s-thom/botc-script-viewer #4

12.6.0 → 12.6.1 Patch PR

Open 11 months ago 1 comment

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #16

12.5.4 → 12.5.5 Patch PR

Closed 12 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.5.4 to 12.5.5

banner4422/personal-website #47

12.5.4 → 12.5.5 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/cloudflare from 12.5.4 to 12.5.5

s5bug/aly.fish #5

12.5.4 → 12.5.5 Patch PR

Closed 12 months ago 2 comments

chore(deps): bump the astro group with 2 updates

go-vikunja/website #129

12.5.4 → 12.5.5 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/cloudflare from 12.5.4 to 12.5.5

awfixers-stuff/blog #57

12.5.4 → 12.5.5 Patch PR

Closed 12 months ago 2 comments

Bump @astrojs/cloudflare from 12.5.2 to 12.5.5 in /docs

kurrent-io/replicator #139

12.5.2 → 12.5.5 Patch PR

Open 12 months ago

chore(deps): bump the patch-updates group across 1 directory with 9 updates

noonomyen/blog.noonomyen.com #22

12.5.0 → 12.5.5 Patch PR

Closed 12 months ago 1 comment

Bump the patch-updates group across 1 directory with 9 updates

xzyyyyyyyyyyy/xzy1.xyz #9

12.5.3 → 12.5.5 Patch PR

Closed 12 months ago 2 comments

chore(deps): bump the patch-updates group with 8 updates

noonomyen/blog.noonomyen.com #20

12.5.0 → 12.5.4 Patch PR

Closed about 1 year ago 1 comment

Bump the patch-updates group across 1 directory with 8 updates

xzyyyyyyyyyyy/xzy1.xyz #8

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago

deps(front)(deps): bump @astrojs/cloudflare from 12.5.3 to 12.5.4 in /front

12.5.3 → 12.5.4 Patch PR

Merged about 1 year ago

chore(deps): bump the patch-updates group across 1 directory with 8 updates

noonomyen/blog.noonomyen.com #19

12.5.0 → 12.5.4 Patch PR

Closed about 1 year ago 1 comment

Bump the patch-updates group across 1 directory with 9 updates

xzyyyyyyyyyyy/xzy1.xyz #7

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 7 updates

noonomyen/blog.noonomyen.com #18

12.5.0 → 12.5.4 Patch PR

Open about 1 year ago 1 comment

Bump @astrojs/cloudflare from 12.5.3 to 12.5.4

more-please/more-stuff #362

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago

chore(deps): Bump the patch-minor group with 6 updates

namesakefyi/namesake.fyi #215

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago 1 comment

Bump the patch-updates group across 1 directory with 8 updates

xzyyyyyyyyyyy/xzy1.xyz #6

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago

Bump the patch-updates group across 1 directory with 8 updates

UnpixeltGuard/unpixeltguard.github.io #12

12.5.2 → 12.5.4 Patch PR

Open about 1 year ago 1 comment

Bump @astrojs/cloudflare from 12.5.3 to 12.5.4

shm11C3/hardviz-webpage #12

12.5.3 → 12.5.4 Patch PR

Merged about 1 year ago

Bump the patch-updates group across 1 directory with 6 updates

xzyyyyyyyyyyy/xzy1.xyz #5

12.5.3 → 12.5.4 Patch PR

Open about 1 year ago

chore(deps-dev): bump @astrojs/cloudflare from 12.5.3 to 12.5.4

secretfader/www #62

12.5.3 → 12.5.4 Patch PR

Merged about 1 year ago 1 comment

chore(deps): bump the astro group with 2 updates

go-vikunja/website #121

12.5.3 → 12.5.4 Patch PR

Merged about 1 year ago 1 comment

Bump @astrojs/cloudflare from 12.5.2 to 12.5.4 in /docs

kurrent-io/replicator #132

12.5.2 → 12.5.4 Patch PR

Open about 1 year ago

chore(deps): Bump @astrojs/cloudflare from 12.5.3 to 12.5.4

haton14/success-salon-astro #428

12.5.3 → 12.5.4 Patch PR

Closed about 1 year ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.5.3 to 12.5.4

Fictive-Flame/www #34

12.5.3 → 12.5.4 Patch PR

Merged about 1 year ago

Bump the patch-updates group across 1 directory with 6 updates

UnpixeltGuard/unpixeltguard.github.io #11

12.5.2 → 12.5.3 Patch PR

Open about 1 year ago

chore(deps): bump the minor-updates group across 1 directory with 26 updates

The-Veteran-Culture-Project/site #322

12.5.0 → 12.5.3 Patch PR

Open about 1 year ago

Bump the astro group with 2 updates

connor-baer/uwcblogs.com #135

12.5.2 → 12.5.3 Patch PR

Open about 1 year ago 1 comment

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #10

12.5.2 → 12.5.3 Patch PR

Open about 1 year ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 4 updates

noonomyen/blog.noonomyen.com #15

12.5.0 → 12.5.3 Patch PR

Open about 1 year ago

Bump the patch-updates group across 1 directory with 5 updates

UnpixeltGuard/unpixeltguard.github.io #9

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 6 updates

noonomyen/blog.noonomyen.com #14

12.5.0 → 12.5.3 Patch PR

Open about 1 year ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 5 updates

noonomyen/blog.noonomyen.com #13

12.5.0 → 12.5.3 Patch PR

Open about 1 year ago

chore(deps): Bump the patch-minor group with 6 updates

namesakefyi/namesake.fyi #212

12.5.2 → 12.5.3 Patch PR

Merged about 1 year ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.5.2 to 12.5.3 in /app

ehassett/ethanhassett #100

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 1 comment

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #8

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.5.2 to 12.5.3

marten-gierth/link #32

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 4 updates

noonomyen/blog.noonomyen.com #12

12.5.0 → 12.5.3 Patch PR

Open about 1 year ago 1 comment

Bump the patch-updates group with 2 updates

UnpixeltGuard/unpixeltguard.github.io #7

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the astro group with 2 updates

go-vikunja/website #102

12.5.2 → 12.5.3 Patch PR

Merged about 1 year ago 1 comment

Bump @astrojs/cloudflare from 12.5.2 to 12.5.3 in /docs

kurrent-io/replicator #120

12.5.2 → 12.5.3 Patch PR

Closed about 1 year ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 5 updates

noonomyen/blog.noonomyen.com #9

12.5.0 → 12.5.2 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 6 updates

noonomyen/blog.noonomyen.com #7

12.5.0 → 12.5.2 Patch PR

Open about 1 year ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.5.0 to 12.5.2

koralle/portfolio #16

12.5.0 → 12.5.2 Patch PR

Merged about 1 year ago

chore(deps): bump @astrojs/cloudflare from 12.2.1 to 12.2.3

RMalik777/blog #257

12.2.1 → 12.2.3 Patch PR

Open over 1 year ago 6 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 499 (62.0%)

Merged 65 (8.1%)

Closed 213 (26.5%)

PR Types

Major 108 (13.4%)

Minor 165 (20.5%)

Patch 497 (61.7%)