`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
805 Dependabot PRs

Latest PR:
about 11 hours ago

Unique Repositories:
331 repositories

Unique Repos (30 days):
39 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 5 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 5 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): bump the all-dependencies group with 10 updates

wavy-cat/petpet-web #9

12.6.3 → 12.6.7 Patch PR

Open 10 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.4 to 12.6.7

cobaltwebtech/cobalt-prod-site #223

12.6.4 → 12.6.7 Patch PR

Open 10 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.7

Bitti09/bgp.mom #57

12.6.4 → 12.6.7 Patch PR

Closed 10 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.7

abemedia/astro-static-headers #22

12.6.5 → 12.6.7 Patch PR

Open 10 months ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.6.4 to 12.6.7

secretfader/www #129

12.6.4 → 12.6.7 Patch PR

Open 10 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.6 to 12.6.7

thebentobot/bento-web #136

12.6.6 → 12.6.7 Patch PR

Closed 10 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.7

banner4422/personal-website #187

12.6.3 → 12.6.7 Patch PR

Open 10 months ago 1 comment

pnpm: bump @astrojs/cloudflare from 12.6.0 to 12.6.7

anonrig/yagiz.co #166

12.6.0 → 12.6.7 Patch PR

Open 10 months ago 3 comments

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.7

nmtrang29/blog #35

12.6.0 → 12.6.7 Patch PR

Open 10 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.6 to 12.6.7

useskift/launch-website #5

12.6.6 → 12.6.7 Patch PR

Open 10 months ago 1 comment

Dep: Bump the npm-dependencies group across 1 directory with 7 updates

Xeffen25/eminence-astro-theme-cloudflare-workers #54

12.6.4 → 12.6.7 Patch PR

Merged 10 months ago 1 comment

Bump the all group across 1 directory with 16 updates

s-thom/botc-script-viewer #7

12.6.0 → 12.6.7 Patch PR

Closed 10 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.7

RMalik777/blog #350

12.6.4 → 12.6.7 Patch PR

Open 10 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.6 to 12.6.7

Fictive-Flame/www #82

12.6.6 → 12.6.7 Patch PR

Open 10 months ago

build(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.6

banner4422/personal-website #183

12.6.3 → 12.6.6 Patch PR

Closed 10 months ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.6.4 to 12.6.6

secretfader/www #128

12.6.4 → 12.6.6 Patch PR

Open 10 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.5 to 12.6.6

thebentobot/bento-web #129

12.6.5 → 12.6.6 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.5 to 12.6.6

s5bug/aly.fish #57

12.6.5 → 12.6.6 Patch PR

Merged 10 months ago 1 comment

Bump the patch-updates group across 1 directory with 4 updates

Luck1076/fuwari #3

12.6.5 → 12.6.6 Patch PR

Open 10 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.6

Bitti09/bgp.mom #54

12.6.4 → 12.6.6 Patch PR

Open 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 2 updates

noonomyen/blog.noonomyen.com #49

12.6.0 → 12.6.5 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.3 to 12.6.5

kaito-tokyo/serverless-kaito-tokyo #69

12.6.3 → 12.6.5 Patch PR

Closed 10 months ago 1 comment

build(deps): Bump @astrojs/cloudflare from 12.6.4 to 12.6.5

dslmobilfunkwiki/mobilfunkwiki #46

12.6.4 → 12.6.5 Patch PR

Open 10 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

omsf/omsf-directory #24

12.6.4 → 12.6.5 Patch PR

Open 10 months ago

Bump the all-dependencies group with 4 updates

bdevos/theshook.one #2

12.6.4 → 12.6.5 Patch PR

Merged 10 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.5

WeMake-AI/platform #73

12.6.0 → 12.6.5 Patch PR

Open 10 months ago

build(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

dslmobilfunkwiki/dslwiki #52

12.6.4 → 12.6.5 Patch PR

Closed 10 months ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

Fictive-Flame/www #79

12.6.4 → 12.6.5 Patch PR

Merged 10 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.4 to 12.6.5

more-please/more-stuff #395

12.6.4 → 12.6.5 Patch PR

Closed 10 months ago 1 comment

build(deps): bump the patch-minor group with 9 updates

AazainKhan/ma-galerie #7

12.6.3 → 12.6.5 Patch PR

Open 10 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

Bitti09/bgp.mom #50

12.6.4 → 12.6.5 Patch PR

Closed 10 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

abemedia/astro-static-headers #14

12.6.4 → 12.6.5 Patch PR

Open 10 months ago

chore(deps-dev): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

secretfader/www #126

12.6.4 → 12.6.5 Patch PR

Open 10 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.4 to 12.6.5

s5bug/aly.fish #54

12.6.4 → 12.6.5 Patch PR

Merged 10 months ago 1 comment

chore(deps): bump the astro group with 4 updates

go-vikunja/website #176

12.6.4 → 12.6.5 Patch PR

Open 10 months ago 1 comment

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.5

nmtrang29/blog #31

12.6.0 → 12.6.5 Patch PR

Open 10 months ago 1 comment

deps(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.5

dennyluan/luanfamilyblog #7

12.6.4 → 12.6.5 Patch PR

Open 10 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.5

bendrucker/bendrucker.me #126

12.6.0 → 12.6.5 Patch PR

Merged 10 months ago

Dep: Bump the npm-dependencies group with 5 updates

Xeffen25/eminence-astro-theme-cloudflare-workers #53

12.6.4 → 12.6.5 Patch PR

Closed 10 months ago 2 comments

deps(deps): bump the minor-and-patch group with 3 updates

char5742/ConstellationCanvas #3

12.6.4 → 12.6.5 Patch PR

Open 10 months ago 2 comments

chore(deps): Bump the patch-minor group across 1 directory with 10 updates

namesakefyi/namesake.fyi #238

12.6.3 → 12.6.5 Patch PR

Open 10 months ago 1 comment

Bump the patch-updates group across 1 directory with 3 updates

UnpixeltGuard/unpixeltguard.github.io #41

12.6.3 → 12.6.4 Patch PR

Open 10 months ago

Bump the patch-updates group across 1 directory with 2 updates

UnpixeltGuard/unpixeltguard.github.io #40

12.6.3 → 12.6.4 Patch PR

Open 10 months ago

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.4

WeMake-AI/platform #66

12.6.0 → 12.6.4 Patch PR

Open 10 months ago 1 comment

build(deps): bump the patch-minor group with 8 updates

AazainKhan/ma-galerie #4

12.6.3 → 12.6.4 Patch PR

Open 10 months ago 2 comments

chore(deps): Bump the patch-minor group with 8 updates

namesakefyi/namesake.fyi #236

12.6.3 → 12.6.4 Patch PR

Closed 10 months ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.6.3 to 12.6.4

secretfader/www #120

12.6.3 → 12.6.4 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.3 to 12.6.4 in the patch-updates group

UnpixeltGuard/unpixeltguard.github.io #38

12.6.3 → 12.6.4 Patch PR

Open 10 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.2 to 12.6.4

thebentobot/bento-web #114

12.6.2 → 12.6.4 Patch PR

Closed 10 months ago 2 comments

Bump the dependencies group across 1 directory with 25 updates

Atyantik/flarekit #40

12.6.0 → 12.6.4 Patch PR

Open 10 months ago 2 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 499 (62.0%)

Merged 65 (8.1%)

Closed 213 (26.5%)

PR Types

Major 108 (13.4%)

Minor 165 (20.5%)

Patch 497 (61.7%)