`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
805 Dependabot PRs

Latest PR:
about 10 hours ago

Unique Repositories:
331 repositories

Unique Repos (30 days):
39 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 5 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 5 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.6

alejandrolaguna20/alejandrolaguna20.github.io #5

12.6.5 → 12.6.6 Patch PR

Merged 9 months ago

chore(deps-dev): bump @astrojs/cloudflare from 12.6.0 to 12.6.7

caprolactam/caproweb.com #343

12.6.0 → 12.6.7 Patch PR

Closed 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.4 to 12.6.6

shikanime-studio/websites #100

12.6.4 → 12.6.6 Patch PR

Closed 9 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.3 to 12.6.6 in /site

Cloudflare-Mining/Cloudflare-Datamining #61

12.6.3 → 12.6.6 Patch PR

Open 9 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates

dpschen/vikunja-website #10

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

dslmobilfunkwiki/dslwiki #59

12.6.4 → 12.6.6 Patch PR

Open 9 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.1 to 12.6.6

blakeox/blakeoxford.com #121

12.6.1 → 12.6.6 Patch PR

Open 9 months ago 1 comment

chore(deps): Bump @astrojs/cloudflare from 12.6.5 to 12.6.6 in the npm_and_yarn group across 1 directory

namesakefyi/namesake.fyi #245

12.6.5 → 12.6.6 Patch PR

Merged 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.4 to 12.6.6

WesSouza/wes.dev #112

12.6.4 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.5 to 12.6.6

CanCLID/jyutping.org #81

12.6.5 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.5 to 12.6.6

supahfox/website #18

12.6.5 → 12.6.6 Patch PR

Merged 9 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.6

wavy-cat/petpet-web #10

12.6.3 → 12.6.6 Patch PR

Closed 9 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.1 to 12.6.6

connor-baer/uwcblogs.com #147

12.6.1 → 12.6.6 Patch PR

Merged 9 months ago 1 comment

chore: bump @astrojs/cloudflare from 12.6.5 to 12.6.6

jake-walker/jakew.me #51

12.6.5 → 12.6.6 Patch PR

Merged 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.6 in the npm_and_yarn group across 1 directory

The-Veteran-Culture-Project/site #340

12.6.5 → 12.6.6 Patch PR

Open 9 months ago

build(deps): Bump @astrojs/cloudflare from 12.6.4 to 12.6.6

dslmobilfunkwiki/mobilfunkwiki #47

12.6.4 → 12.6.6 Patch PR

Open 9 months ago

chore(deps)(deps-dev): bump @astrojs/cloudflare from 12.6.5 to 12.6.6 in the npm_and_yarn group across 1 directory

amanthanvi/synac #37

12.6.5 → 12.6.6 Patch PR

Merged 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.6

drodol/drodolcom #13

12.6.5 → 12.6.6 Patch PR

Open 9 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.6

prabincankod/prabinsubedi.tech #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.4 to 12.6.6 in /portfolio-astro

JeffMelton/jeff.inert.io #2

12.6.4 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

irvinebroque/saas-admin-template-2 #4

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

jaredcat/bodega-cat #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump the npm_and_yarn group across 1 directory with 2 updates

0s1n/astro-blog-starter-template #2

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.2 to 12.6.6

jbazann/dubbi #2

12.6.2 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.2 to 12.6.6

philnash/philna.sh #50

12.6.2 → 12.6.6 Patch PR

Open 9 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.6

finrodchen/astro-blog #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

StephenPower/online-beauty-bar #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

build(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.6

bendrucker/bendrucker.me #137

12.6.5 → 12.6.6 Patch PR

Open 9 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.6

soopyc/soopyc.github.io #31

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6 in /astro-blog-starter-template

Jaketdaniels/templates #4

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

jesserobbins/astro-blog-starter-template #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.1 to 12.6.6

orryverducci/orry-on-the-web #427

12.6.1 → 12.6.6 Patch PR

Merged 9 months ago

build(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.6

Semsemq/odd-dust-fc3d #11

12.6.4 → 12.6.6 Patch PR

Open 9 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.2 to 12.6.6

Semsemq/astro-blog-starter-template #11

12.6.2 → 12.6.6 Patch PR

Open 9 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

irvinebroque/saas-admin-template-353454 #2

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

irvinebroque/astro-blog-starter-template #1

12.6.0 → 12.6.6 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

Tomyail/astro-blog-starter-template #4

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

irvinebroque/saas-admin-template-5 #4

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.5 to 12.6.6

ColeTownsend/bestbuddies #6

12.6.5 → 12.6.6 Patch PR

Closed 9 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

irvinebroque/saas-admin-template-2434 #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.6

mdpearson/looptid-homepage #3

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump the patch-updates group across 1 directory with 5 updates

Luck1076/fuwari #4

12.6.5 → 12.6.7 Patch PR

Open 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.7

omsf/omsf-directory #33

12.6.5 → 12.6.7 Patch PR

Closed 10 months ago 2 comments

Bump the patch-updates group with 6 updates

c0ffeeOverdose/blog.c0ffeeoverdose #30

12.6.0 → 12.6.7 Patch PR

Open 10 months ago 2 comments

chore(deps): bump the astro group with 2 updates

go-vikunja/website #184

12.6.6 → 12.6.7 Patch PR

Open 10 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.6 to 12.6.7

s5bug/aly.fish #60

12.6.6 → 12.6.7 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.3 to 12.6.7

kaito-tokyo/serverless-kaito-tokyo #72

12.6.3 → 12.6.7 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.7

kiakiraki/blog #77

12.6.3 → 12.6.7 Patch PR

Merged 10 months ago 1 comment

Bump the all-dependencies group with 4 updates

bdevos/theshook.one #3

12.6.5 → 12.6.7 Patch PR

Open 10 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.7

dslmobilfunkwiki/dslwiki #57

12.6.4 → 12.6.7 Patch PR

Open 10 months ago 1 comment

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 499 (62.0%)

Merged 65 (8.1%)

Closed 213 (26.5%)

PR Types

Major 108 (13.4%)

Minor 165 (20.5%)

Patch 497 (61.7%)