`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
808 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
332 repositories

Unique Repos (30 days):
38 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 10 months ago • updated 10 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 10 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 1 directory with 10 updates

sajdakabir/march-landing #140

11.2.0 → 12.6.6 Major PR

Merged 9 months ago 1 comment

Bump @astrojs/cloudflare from 12.1.0 to 12.6.6

kelaspajak/astro-ghost #2

12.1.0 → 12.6.6 Minor PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.5.2 to 12.6.6

eitaar/eitaar.dev-mid #30

12.5.2 → 12.6.6 Minor PR

Merged 9 months ago

Bump @astrojs/cloudflare from 12.6.3 to 12.6.8

kaito-tokyo/serverless-kaito-tokyo #77

12.6.3 → 12.6.8 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.6

eitaar/eitaar.dev #59

12.6.3 → 12.6.6 Patch PR

Merged 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.6 to 12.6.8

blakeox/blakeoxford.com #143

12.6.6 → 12.6.8 Patch PR

Closed 9 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.7 to 12.6.8

more-please/more-stuff #408

12.6.7 → 12.6.8 Patch PR

Closed 9 months ago 1 comment

Bump the patch-updates group across 1 directory with 8 updates

ponyobot/blog.ponyobot.kr #5

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

build(deps): bump @astrojs/cloudflare from 11.2.0 to 12.6.6

MultiTheFranky/portfolio #276

11.2.0 → 12.6.6 Major PR

Open 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

abemedia/astro-static-headers #29

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago

Bump @astrojs/cloudflare from 12.2.3 to 12.6.8

pHo9UBenaA/hono-astro-service-binding-example #95

12.2.3 → 12.6.8 Minor PR

Closed 9 months ago 1 comment

Bump the patch-updates group across 1 directory with 9 updates

c0ffeeOverdose/blog.c0ffeeoverdose #32

12.6.0 → 12.6.8 Patch PR

Open 9 months ago

Bump @astrojs/cloudflare from 12.2.1 to 12.6.8

eddyv/personal-website #64

12.2.1 → 12.6.8 Minor PR

Open 9 months ago

build(deps): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

banner4422/personal-website #208

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

marten-gierth/link #71

12.6.7 → 12.6.8 Patch PR

Closed 9 months ago 1 comment

Bump the patch-updates group across 1 directory with 8 updates

imBlanker/fuwari_0 #8

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.8

nmtrang29/blog #48

12.6.0 → 12.6.8 Patch PR

Open 9 months ago 3 comments

deps(deps): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

dennyluan/luanfamilyblog #24

12.6.7 → 12.6.8 Patch PR

Open 9 months ago 3 comments

deps(deps): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

mrmps/personal-blog #8

12.6.7 → 12.6.8 Patch PR

Open 9 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 12.6.5 to 12.6.8

bendrucker/bendrucker.me #145

12.6.5 → 12.6.8 Patch PR

Merged 9 months ago

Dep: Bump the npm-dependencies group with 11 updates

Xeffen25/eminence-astro-theme-cloudflare-workers #56

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

tnfssc/sca.run #3

12.1.0 → 12.6.6 Minor PR

Open 9 months ago

Bump the npm_and_yarn group across 10 directories with 24 updates

Watemlifts/templates #2

12.1.0 → 12.6.6 Minor PR

Open 9 months ago

chore(deps): bump the production-dependencies group across 1 directory with 4 updates

HubEvolution/EvolutionHub #18

12.6.4 → 12.6.8 Patch PR

Open 9 months ago 3 comments

build(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8 in /test/setup-node/yarn1

fernandopasik/actions #145

12.6.7 → 12.6.8 Patch PR

Closed 9 months ago 1 comment

build(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8 in /test/setup-node/yarn

fernandopasik/actions #139

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8 in /test/setup-node/pnpm

fernandopasik/actions #135

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8 in /test/setup-node/npm

fernandopasik/actions #132

12.6.7 → 12.6.8 Patch PR

Open 9 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

wetocean/snake #1

12.6.0 → 12.6.6 Patch PR

Open 9 months ago

Bump the npm_and_yarn group across 13 directories with 23 updates

bysnet/temp #8

12.1.0 → 12.6.6 Minor PR

Open 9 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

Fictive-Flame/www #90

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 8 updates

0xLaurens/sendfa.st #39

12.3.0 → 12.6.6 Minor PR

Open 9 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.4 to 12.6.8

Bitti09/bgp.mom #65

12.6.4 → 12.6.8 Patch PR

Open 9 months ago 3 comments

Bump the patch-updates group across 1 directory with 6 updates

ponyobot/blog.ponyobot.kr #4

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

chore(deps-dev): bump @astrojs/cloudflare from 12.6.7 to 12.6.8

secretfader/www #139

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

Bump the patch-updates group across 1 directory with 7 updates

c0ffeeOverdose/blog.c0ffeeoverdose #31

12.6.0 → 12.6.8 Patch PR

Open 9 months ago 2 comments

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #48

12.6.7 → 12.6.8 Patch PR

Open 9 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.6 to 12.6.8

thebentobot/bento-web #145

12.6.6 → 12.6.8 Patch PR

Closed 9 months ago 2 comments

Bump the patch-updates group across 1 directory with 6 updates

imBlanker/fuwari_0 #7

12.6.7 → 12.6.8 Patch PR

Closed 9 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.7 to 12.6.8

s5bug/aly.fish #64

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago

chore(deps): bump the astro group with 3 updates

go-vikunja/website #188

12.6.7 → 12.6.8 Patch PR

Open 9 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.0 to 12.6.8

caprolactam/caproweb.com #345

12.6.0 → 12.6.8 Patch PR

Closed 9 months ago 1 comment

build(deps): Bump @astrojs/cloudflare from 12.6.4 to 12.6.8

dslmobilfunkwiki/mobilfunkwiki #49

12.6.4 → 12.6.8 Patch PR

Closed 9 months ago 3 comments

Bump @astrojs/cloudflare from 12.5.2 to 12.6.8 in /docs

kurrent-io/replicator #184

12.5.2 → 12.6.8 Minor PR

Closed 9 months ago 2 comments

Bump @astrojs/cloudflare from 8.1.0 to 12.6.8

haton14/blog #264

8.1.0 → 12.6.8 Major PR

Closed 9 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 3 updates

noonomyen/blog.noonomyen.com #52

12.6.0 → 12.6.8 Patch PR

Open 9 months ago 2 comments

chore(deps): Bump @astrojs/cloudflare from 12.5.3 to 12.6.8

haton14/success-salon-astro #467

12.5.3 → 12.6.8 Minor PR

Closed 9 months ago 2 comments

Bump the all-dependencies group with 2 updates

bdevos/theshook.one #5

12.6.7 → 12.6.8 Patch PR

Merged 9 months ago 2 comments

deps(deps): bump the minor-and-patch group across 1 directory with 5 updates

char5742/ConstellationCanvas #6

12.6.4 → 12.6.8 Patch PR

Open 9 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.1 to 12.6.7

blakeox/blakeoxford.com #127

12.6.1 → 12.6.7 Patch PR

Closed 9 months ago 5 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 501 (62.0%)

Merged 65 (8.0%)

Closed 214 (26.5%)

PR Types

Major 110 (13.6%)

Minor 165 (20.4%)

Patch 498 (61.6%)