`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
783 Dependabot PRs

Latest PR:
about 10 hours ago

Unique Repositories:
320 repositories

Unique Repos (30 days):
41 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 2 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 1 month ago • updated 2 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 1 directory with 6 updates

DallasBicycleCoalition/DBC-Site #119

12.6.13 → 13.1.10 Major PR

Open 28 days ago 1 comment

Bump the astro group across 1 directory with 3 updates

Mpaden-glitch/foundationalmile_site #28

12.6.13 → 13.3.0 Major PR

Open 29 days ago 1 comment

deps(deps): bump the minor-and-patch group with 11 updates

kjfsm/notion-headless-cms #157

13.2.1 → 13.3.0 Minor PR

Open 29 days ago 6 comments

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.3.0

raiga0310/profile.a6x.dev_2026 #72

13.1.4 → 13.3.0 Minor PR

Open 29 days ago 2 comments

chore(deps): bump the minor-and-patch group with 15 updates

omawhite/Cicada-Cinema #29

13.2.1 → 13.3.0 Minor PR

Open 30 days ago 2 comments

build(deps): bump the npm_and_yarn group across 2 directories with 5 updates

tsukasa-u/FUSOU #177

13.1.5 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

LeXwDeX/opencode #12

12.6.3 → 13.1.10 Major PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

DallasBicycleCoalition/DBC-Site #114

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 2 comments

deps(site): bump the astro group across 1 directory with 3 updates

asfbay-bit/opchain #129

12.6.13 → 13.3.0 Major PR

Open about 1 month ago 6 comments

chore(deps): bump the patch-minor group across 1 directory with 15 updates

tsaohsihsueh/Home #3

13.1.10 → 13.3.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the astro group across 1 directory with 4 updates

kestra-io/docs #4691

13.1.8 → 13.2.2 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the astro group with 3 updates

kiakiraki/blog #276

13.2.1 → 13.2.2 Patch PR

Open about 1 month ago 1 comment

build(deps-dev): bump the all-dependencies group with 6 updates

Sportvereniging-H-G-V/apenkooitoernooi #59

13.1.10 → 13.2.1 Minor PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 12.6.13 to 13.1.10

brumleygap/commontime #26

12.6.13 → 13.1.10 Major PR

Closed about 1 month ago 3 comments

build(deps): bump the all-dependencies group across 6 directories with 11 updates

reeple-studio/clay-cms #10

13.1.7 → 13.2.1 Minor PR

Closed about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.2.1

akasaya/cinamoroll-fan-site #10

13.1.3 → 13.2.1 Minor PR

Closed about 1 month ago 3 comments

deps(deps): bump the minor-and-patch group across 1 directory with 7 updates

kjfsm/notion-headless-cms #113

13.2.0 → 13.2.1 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.2.1

raiga0310/profile.a6x.dev_2026 #66

13.1.4 → 13.2.1 Minor PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.10 in the npm_and_yarn group across 1 directory

johnpangalos/blog.pangalos.dev #42

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 12.6.13 to 13.1.10

ESPresense/ESPresense.com #311

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 8 comments

Bump the patch-updates group with 15 updates

GZ-Dennell/NT-Hicity #1

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump the minor-and-patch group across 1 directory with 16 updates

omawhite/Cicada-Cinema #16

13.1.8 → 13.2.1 Minor PR

Open about 1 month ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 13.1.8 to 13.1.10

omawhite/Cicada-Cinema #15

13.1.8 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

zpuckeridge/blog #199

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 1 comment

Bump the patch-updates group with 15 updates

Gaosane/MYWBlog #18

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 3 updates

ahliweb/awcms #100

13.1.7 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

Bump @astrojs/cloudflare from 13.1.9 to 13.1.10 in the npm_and_yarn group across 1 directory

aerospeedsta/aerospeedsta-astro #2

13.1.9 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 12.6.13 to 13.1.10

ESPresense/ESPresense.com #309

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 19 comments

chore(deps): bump @astrojs/cloudflare from 13.1.7 to 13.1.10

cytsai1008/kenichi-profile #8

13.1.7 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

Bump @astrojs/cloudflare from 12.6.13 to 13.1.10 in /site

Cloudflare-Mining/Cloudflare-Datamining #132

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.13 to 13.1.10

agiletactix/agiletactix-site #35

12.6.13 → 13.1.10 Major PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.9 to 13.1.10

letsbuilda/letsbuilda.dev #52

13.1.9 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

chore: Bump @astrojs/cloudflare from 13.1.9 to 13.1.10

shogo-tanaka-work/shogo-works #84

13.1.9 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

chore(deps):(deps): bump @astrojs/cloudflare from 13.1.8 to 13.1.10

alehar9320/astro-cloudflare-personal-website #130

13.1.8 → 13.1.10 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump @astrojs/cloudflare from 13.0.0-beta.6 to 13.1.10

bsoyka/website #58

13.0.0-beta.6 → 13.1.10 Minor PR

Open about 1 month ago 1 comment

pnpm: bump @astrojs/cloudflare from 13.1.6 to 13.1.10

anonrig/yagiz.co #191

13.1.6 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.3 to 13.1.10

PetroSilenius/euribor-rates #19

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 13.1.7 to 13.1.10

sdldev/portalonline-id #17

13.1.7 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.2 to 13.1.10

cloudflare/research.cloudflare.com #233

13.1.2 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.3 to 13.1.10

musosoft/lamateam-web #90

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.10

philnash/philna.sh #81

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.6 to 13.1.10

ersintarhan/blog #7

13.1.6 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.12 to 13.1.10

anomalousventures/democracy-direct #175

12.6.12 → 13.1.10 Major PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

reallyjustasquirrel/opencode #38

12.6.3 → 13.1.10 Major PR

Closed about 1 month ago 4 comments

chore(deps): bump @astrojs/cloudflare from 12.6.12 to 13.1.10

aapav01/apavayan.com #10

12.6.12 → 13.1.10 Major PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 12.6.12 to 13.1.10

jackmcpickle/jackmcpickle.github.io #486

12.6.12 → 13.1.10 Major PR

Open about 1 month ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 4 updates

neopilot-ai/neocode #22

12.6.6 → 13.1.10 Major PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 12.6.12 to 13.1.10

jackhsu978/jackhsu.dev #53

12.6.12 → 13.1.10 Major PR

Closed about 1 month ago 2 comments

Bump @astrojs/cloudflare from 12.6.6 to 13.1.10

yogesh200002/yogesh.me #57

12.6.6 → 13.1.10 Major PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 12.6.2 to 13.1.10

p5hzehxa/astro-blog-starter-template #21

12.6.2 → 13.1.10 Major PR

Open about 1 month ago 2 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` 12 months ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 487 (62.3%)

Merged 65 (8.3%)

Closed 202 (25.8%)

PR Types

Major 98 (12.5%)

Minor 156 (19.9%)

Patch 494 (63.2%)