`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
805 Dependabot PRs

Latest PR:
about 14 hours ago

Unique Repositories:
331 repositories

Unique Repos (30 days):
39 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 5 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 2 months ago • updated 5 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the astro group with 4 updates

go-vikunja/website #172

12.6.3 → 12.6.4 Patch PR

Open 10 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.3 to 12.6.4

s5bug/aly.fish #50

12.6.3 → 12.6.4 Patch PR

Open 10 months ago 1 comment

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.4

nmtrang29/blog #23

12.6.0 → 12.6.4 Patch PR

Open 10 months ago 4 comments

chore(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.4

RMalik777/blog #331

12.6.3 → 12.6.4 Patch PR

Open 10 months ago 1 comment

Bump the patch group with 6 updates

tattsu-spinor/eventernote-tools #48

12.6.3 → 12.6.4 Patch PR

Open 10 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.3 to 12.6.4

Fictive-Flame/www #75

12.6.3 → 12.6.4 Patch PR

Merged 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 3 updates

noonomyen/blog.noonomyen.com #47

12.6.0 → 12.6.3 Patch PR

Closed 10 months ago 2 comments

chore(deps-dev): bump @astrojs/cloudflare from 12.6.2 to 12.6.3

Fictive-Flame/www #69

12.6.2 → 12.6.3 Patch PR

Open 10 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.2 to 12.6.3

thebentobot/bento-web #108

12.6.2 → 12.6.3 Patch PR

Closed 10 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 12.6.2 to 12.6.3

kiakiraki/blog #57

12.6.2 → 12.6.3 Patch PR

Merged 10 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 5 updates

noonomyen/blog.noonomyen.com #46

12.6.0 → 12.6.3 Patch PR

Open 10 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.3

WeMake-AI/platform #60

12.6.0 → 12.6.3 Patch PR

Open 10 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.3

Bitti09/bgp.mom #41

12.6.0 → 12.6.3 Patch PR

Closed 10 months ago 4 comments

chore(deps): Bump the patch-minor group with 5 updates

namesakefyi/namesake.fyi #234

12.6.2 → 12.6.3 Patch PR

Merged 10 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.2 to 12.6.3

secretfader/www #112

12.6.2 → 12.6.3 Patch PR

Open 10 months ago

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #34

12.6.1 → 12.6.3 Patch PR

Open 10 months ago

build(deps): bump @astrojs/cloudflare from 12.6.2 to 12.6.3

banner4422/personal-website #154

12.6.2 → 12.6.3 Patch PR

Merged 10 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.2 to 12.6.3

s5bug/aly.fish #44

12.6.2 → 12.6.3 Patch PR

Merged 10 months ago 1 comment

chore(deps): bump the astro group with 3 updates

go-vikunja/website #167

12.6.2 → 12.6.3 Patch PR

Open 10 months ago 1 comment

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.3

nmtrang29/blog #10

12.6.0 → 12.6.3 Patch PR

Closed 10 months ago 4 comments

Dep: Bump @astrojs/cloudflare from 12.6.2 to 12.6.3

Xeffen25/eminence-astro-theme-cloudflare-workers #45

12.6.2 → 12.6.3 Patch PR

Closed 10 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.3

RMalik777/blog #311

12.6.0 → 12.6.3 Patch PR

Open 10 months ago

Bump the patch-updates group across 1 directory with 3 updates

UnpixeltGuard/unpixeltguard.github.io #33

12.6.1 → 12.6.2 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 4 updates

noonomyen/blog.noonomyen.com #45

12.6.0 → 12.6.2 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.2

kiakiraki/blog #36

12.6.0 → 12.6.2 Patch PR

Open 10 months ago

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.2

WeMake-AI/platform #50

12.6.0 → 12.6.2 Patch PR

Open 10 months ago

Bump @astrojs/cloudflare from 12.6.0 to 12.6.2

more-please/more-stuff #387

12.6.0 → 12.6.2 Patch PR

Open 10 months ago

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.2

Bitti09/bgp.mom #38

12.6.0 → 12.6.2 Patch PR

Closed 10 months ago 3 comments

chore(deps): Bump the patch-minor group with 10 updates

namesakefyi/namesake.fyi #233

12.6.0 → 12.6.2 Patch PR

Merged 11 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.1 to 12.6.2

secretfader/www #104

12.6.1 → 12.6.2 Patch PR

Merged 11 months ago 2 comments

Bump the patch-updates group with 3 updates

UnpixeltGuard/unpixeltguard.github.io #32

12.6.1 → 12.6.2 Patch PR

Closed 11 months ago 1 comment

build(deps): bump @astrojs/cloudflare from 12.6.1 to 12.6.2

banner4422/personal-website #144

12.6.1 → 12.6.2 Patch PR

Merged 11 months ago 1 comment

build(deps-dev): bump @astrojs/cloudflare from 12.6.1 to 12.6.2

thebentobot/bento-web #93

12.6.1 → 12.6.2 Patch PR

Open 11 months ago 1 comment

Bump the dependencies group across 1 directory with 22 updates

Atyantik/flarekit #37

12.6.0 → 12.6.2 Patch PR

Open 11 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.1 to 12.6.2

s5bug/aly.fish #38

12.6.1 → 12.6.2 Patch PR

Merged 11 months ago 1 comment

chore(deps): bump the astro group with 4 updates

go-vikunja/website #164

12.6.1 → 12.6.2 Patch PR

Open 11 months ago 1 comment

deps(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.2

nmtrang29/blog #7

12.6.0 → 12.6.2 Patch PR

Closed 11 months ago 4 comments

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.2

RMalik777/blog #303

12.6.0 → 12.6.2 Patch PR

Closed 11 months ago 2 comments

Bump @astrojs/cloudflare from 12.6.0 to 12.6.2

pHo9UBenaA/chrome-extension-collection-page #27

12.6.0 → 12.6.2 Patch PR

Closed 11 months ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 12.6.0 to 12.6.2

Fictive-Flame/www #66

12.6.0 → 12.6.2 Patch PR

Merged 11 months ago

Bump the astro group with 2 updates

connor-baer/uwcblogs.com #141

12.6.0 → 12.6.1 Patch PR

Open 11 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.1

Bitti09/bgp.mom #37

12.6.0 → 12.6.1 Patch PR

Closed 11 months ago 3 comments

Bump @astrojs/cloudflare from 12.6.0 to 12.6.1

orryverducci/orry-on-the-web #418

12.6.0 → 12.6.1 Patch PR

Merged 11 months ago

chore(deps-dev): bump @astrojs/cloudflare from 12.6.0 to 12.6.1

secretfader/www #103

12.6.0 → 12.6.1 Patch PR

Open 11 months ago 2 comments

Bump the patch-updates group across 1 directory with 3 updates

UnpixeltGuard/unpixeltguard.github.io #31

12.6.0 → 12.6.1 Patch PR

Merged 11 months ago

build(deps): bump @astrojs/cloudflare from 12.6.0 to 12.6.1

banner4422/personal-website #140

12.6.0 → 12.6.1 Patch PR

Open 11 months ago

build(deps-dev): bump @astrojs/cloudflare from 12.6.0 to 12.6.1

thebentobot/bento-web #92

12.6.0 → 12.6.1 Patch PR

Merged 11 months ago 1 comment

Bump @astrojs/cloudflare from 12.6.0 to 12.6.1

s5bug/aly.fish #36

12.6.0 → 12.6.1 Patch PR

Open 11 months ago

chore(deps): bump the astro group with 4 updates

go-vikunja/website #161

12.6.0 → 12.6.1 Patch PR

Open 11 months ago 1 comment

pnpm: bump @astrojs/cloudflare from 12.6.0 to 12.6.1

anonrig/yagiz.co #161

12.6.0 → 12.6.1 Patch PR

Closed 11 months ago 3 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` about 1 year ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 499 (62.0%)

Merged 65 (8.1%)

Closed 213 (26.5%)

PR Types

Major 108 (13.4%)

Minor 165 (20.5%)

Patch 497 (61.7%)