`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
808 Dependabot PRs

Latest PR:
about 12 hours ago

Unique Repositories:
332 repositories

Unique Repos (30 days):
38 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 10 months ago • updated 9 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 9 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs

RSS Feed

build(deps): bump the astro-ecosystem group in /www-dev with 2 updates

launchfile/launchfile #27

13.1.7 → 13.1.8 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump the minor-patch group across 1 directory with 14 updates

MichaelFisher1997/staticfish-v2 #29

13.1.3 → 13.1.8 Patch PR

Closed 2 months ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.8

akasaya/cinamoroll-fan-site #6

13.1.3 → 13.1.8 Patch PR

Open 2 months ago 2 comments

Bump undici and @astrojs/cloudflare in /site

Cloudflare-Mining/Cloudflare-Datamining #129

12.6.13 → 13.1.8 Major PR

Open 2 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.8

raiga0310/profile.a6x.dev_2026 #56

13.1.4 → 13.1.8 Patch PR

Open 2 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.13 to 13.1.8 in /website

ShowMyCards/ShowMyCards #54

12.6.13 → 13.1.8 Major PR

Open 2 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.13 to 13.1.8

davidhouweling/guilty-spark #429

12.6.13 → 13.1.8 Major PR

Closed 2 months ago 3 comments

Bump the astro group with 3 updates

koji-1009/tabisaki-demo #10

13.1.6 → 13.1.7 Patch PR

Open 2 months ago 1 comment

chore(deps): bump undici and @astrojs/cloudflare

pike00/personal-site #2

12.6.13 → 13.1.8 Major PR

Open 2 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.8

Bitti09/bgp.mom #180

13.1.4 → 13.1.8 Patch PR

Closed 2 months ago 2 comments

Bump the patch-updates group with 15 updates

Atopos-jy/Blog #1

12.6.12 → 12.6.13 Patch PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 17 directories with 8 updates

NeuroLift-Technologies/templates #8

12.6.0 → 12.6.6 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

StankySpence/opencode #2

12.6.3 → 12.6.6 Patch PR

Closed 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

nordicfactory/lumicode #10

12.6.3 → 12.6.6 Patch PR

Closed 2 months ago 4 comments

chore(deps): bump the production-minor-patch group with 2 updates

CodeAlanDebug/astro-blog #59

13.1.5 → 13.1.7 Patch PR

Closed 2 months ago 2 comments

Bump @astrojs/cloudflare from 13.1.6 to 13.1.7

cobaltwebtech/cobalt-prod-site #295

13.1.6 → 13.1.7 Patch PR

Open 2 months ago 1 comment

Bump @astrojs/cloudflare from 13.1.3 to 13.1.7

akasaya/cinamoroll-fan-site #4

13.1.3 → 13.1.7 Patch PR

Open 2 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.1 to 13.1.3

bendrucker/bendrucker.me #370

13.1.1 → 13.1.3 Patch PR

Closed 2 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.13 to 13.1.7 in /website

ShowMyCards/ShowMyCards #49

12.6.13 → 13.1.7 Major PR

Closed 3 months ago 2 comments

Bump the patch-updates group with 15 updates

kelvingates-creator/neofaithcollective #10

12.6.12 → 12.6.13 Patch PR

Open 3 months ago 1 comment

Bump @astrojs/cloudflare from 13.1.4 to 13.1.7

ConflictHQ/boilerworks-astro-site #9

13.1.4 → 13.1.7 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.7

alehar9320/astro-cloudflare-personal-website #43

13.1.4 → 13.1.7 Patch PR

Open 3 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.12 to 13.1.7

davidhouweling/guilty-spark #415

12.6.12 → 13.1.7 Major PR

Open 3 months ago 2 comments

chore(deps): bump undici and @astrojs/cloudflare

bsoyka/website #54

13.0.0-beta.6 → 13.1.7 Minor PR

Open 3 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.12 to 13.1.7

cpps-unesp/site-cpps #171

12.6.12 → 13.1.7 Major PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

nordicfactory/lumicode #8

12.6.3 → 12.6.6 Patch PR

Open 3 months ago 4 comments

build(deps): bump the patch-updates group across 1 directory with 15 updates

dhbxs/Twilight-Theme-Blog #1

12.6.12 → 12.6.13 Patch PR

Open 3 months ago 1 comment

pnpm: bump @astrojs/cloudflare from 13.1.4 to 13.1.6

anonrig/yagiz.co #184

13.1.4 → 13.1.6 Patch PR

Open 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 15 updates

Spr-Aachen/Twilight #115

12.6.12 → 12.6.13 Patch PR

Closed 3 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.6

nblackburn/website #799

13.1.4 → 13.1.6 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the all-dependencies group with 2 updates

Sportvereniging-H-G-V/hgvhengelo #53

13.1.4 → 13.1.6 Patch PR

Open 3 months ago 1 comment

deps: bump @astrojs/cloudflare from 12.6.12 to 13.1.4

Pagayo/pagayo-marketing #29

12.6.12 → 13.1.4 Major PR

Closed 3 months ago 3 comments

chore(deps): bump the minor-patch group with 7 updates

MichaelFisher1997/staticfish-v2 #26

13.1.3 → 13.1.4 Patch PR

Open 3 months ago 1 comment

deps(deps): bump the all-dependencies group across 1 directory with 12 updates

jmbish04/core-ux-researcher #10

12.6.13 → 13.1.4 Major PR

Open 3 months ago 2 comments

Bump the patch-updates group with 14 updates

zanyaowo/blog #1

12.6.12 → 12.6.13 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 5 updates

TheMapleseed/OpenCode #1

12.6.3 → 12.6.6 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

nordicfactory/lumicode #5

12.6.3 → 12.6.6 Patch PR

Closed 3 months ago 4 comments

chore(deps): bump the astro group with 4 updates

kiakiraki/blog #252

13.1.2 → 13.1.3 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the all-dependencies group with 5 updates

Sportvereniging-H-G-V/hgvhengelo #45

13.1.2 → 13.1.3 Patch PR

Closed 3 months ago 4 comments

Bump the all-dependencies group with 5 updates

bdevos/theshook.one #31

13.1.2 → 13.1.3 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.1 to 13.1.3

raiga0310/profile.a6x.dev_2026 #26

13.1.1 → 13.1.3 Patch PR

Open 3 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.12 to 12.6.13

goldshore/goldshore-ai #4244

12.6.12 → 12.6.13 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the dependencies group with 10 updates

dacrab/mise #28

13.1.1 → 13.1.3 Patch PR

Closed 3 months ago 1 comment

Bump undici and @astrojs/cloudflare

CanCLID/jyutping.org #110

12.6.12 → 13.1.2 Major PR

Open 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 19 updates

CrowVoice/Twilight #10

12.6.12 → 12.6.13 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 12 updates

Happy8bit/MZTwilight #6

12.6.12 → 12.6.13 Patch PR

Open 3 months ago 1 comment

Bump undici and @astrojs/cloudflare

philnash/philna.sh #72

12.6.13 → 13.1.2 Major PR

Open 3 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.1 to 13.1.2

Bitti09/bgp.mom #158

13.1.1 → 13.1.2 Patch PR

Closed 3 months ago 2 comments

⬆️(deps): bump the astro group with 3 updates

anIcedAntFA/my-site #52

12.6.13 → 13.1.1 Major PR

Open 3 months ago 2 comments

deps: bump @astrojs/cloudflare from 12.6.12 to 13.1.1

Pagayo/pagayo-marketing #15

12.6.12 → 13.1.1 Major PR

Open 3 months ago 1 comment

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 501 (62.0%)

Merged 65 (8.0%)

Closed 214 (26.5%)

PR Types

Major 110 (13.6%)

Minor 165 (20.4%)

Patch 498 (61.6%)