`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
783 Dependabot PRs

Latest PR:
about 19 hours ago

Unique Repositories:
320 repositories

Unique Repos (30 days):
41 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 2 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 1 month ago • updated 2 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Closed , Patch PRs )

RSS Feed Clear filter

chore(deps): bump @astrojs/cloudflare from 13.5.1 to 13.5.2

leowla/leowla.com #21

13.5.1 → 13.5.2 Patch PR

Closed 13 days ago 2 comments

Bump the patch-updates group with 15 updates

GZ-Dennell/NT-Hicity #1

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 1 comment

Bump the patch-updates group with 15 updates

Gaosane/MYWBlog #18

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.7 to 13.1.10

cytsai1008/kenichi-profile #8

13.1.7 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

Bump @astrojs/cloudflare from 13.1.9 to 13.1.10

letsbuilda/letsbuilda.dev #52

13.1.9 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

chore(deps):(deps): bump @astrojs/cloudflare from 13.1.8 to 13.1.10

alehar9320/astro-cloudflare-personal-website #130

13.1.8 → 13.1.10 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

kooymansfinds/opencode #3

12.6.3 → 12.6.6 Patch PR

Closed about 1 month ago 4 comments

Bump the patch-updates group across 1 directory with 15 updates

LLGY0/LLGY0.github.io #7

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 2 comments

Bump the minor-and-patch group with 10 updates

akshitkrnagpal/edgepush #10

13.1.9 → 13.1.10 Patch PR

Closed about 1 month ago 2 comments

Bump the patch-updates group across 1 directory with 20 updates

Applesaber/Applesaber.github.io #7

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 1 comment

Bump the patch-updates group across 1 directory with 20 updates

Yuanjia-Lee/Yuanjia-Lee.github.io #9

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the patch-updates group in /www with 2 updates

clef-sh/clef #149

13.1.6 → 13.1.9 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 6 updates

iansherr/opencode #1

12.6.3 → 12.6.6 Patch PR

Closed about 2 months ago 3 comments

chore(deps): bump the minor-patch group across 1 directory with 14 updates

MichaelFisher1997/staticfish-v2 #29

13.1.3 → 13.1.8 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.8

Bitti09/bgp.mom #180

13.1.4 → 13.1.8 Patch PR

Closed about 2 months ago 2 comments

Bump the patch-updates group with 15 updates

Atopos-jy/Blog #1

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 17 directories with 8 updates

NeuroLift-Technologies/templates #8

12.6.0 → 12.6.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

StankySpence/opencode #2

12.6.3 → 12.6.6 Patch PR

Closed about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

nordicfactory/lumicode #10

12.6.3 → 12.6.6 Patch PR

Closed about 2 months ago 4 comments

chore(deps): bump the production-minor-patch group with 2 updates

CodeAlanDebug/astro-blog #59

13.1.5 → 13.1.7 Patch PR

Closed about 2 months ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.1 to 13.1.3

bendrucker/bendrucker.me #370

13.1.1 → 13.1.3 Patch PR

Closed about 2 months ago 1 comment

Bump @astrojs/cloudflare from 13.1.4 to 13.1.7

ConflictHQ/boilerworks-astro-site #9

13.1.4 → 13.1.7 Patch PR

Closed about 2 months ago 1 comment

Bump the patch-updates group across 1 directory with 15 updates

Spr-Aachen/Twilight #115

12.6.12 → 12.6.13 Patch PR

Closed 2 months ago 3 comments

Bump the patch-updates group with 14 updates

zanyaowo/blog #1

12.6.12 → 12.6.13 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 5 updates

TheMapleseed/OpenCode #1

12.6.3 → 12.6.6 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

nordicfactory/lumicode #5

12.6.3 → 12.6.6 Patch PR

Closed 2 months ago 4 comments

chore(deps): bump the all-dependencies group with 5 updates

Sportvereniging-H-G-V/hgvhengelo #45

13.1.2 → 13.1.3 Patch PR

Closed 2 months ago 4 comments

chore(deps): bump the dependencies group with 10 updates

dacrab/mise #28

13.1.1 → 13.1.3 Patch PR

Closed 2 months ago 1 comment

Bump the patch-updates group across 1 directory with 19 updates

CrowVoice/Twilight #10

12.6.12 → 12.6.13 Patch PR

Closed 2 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.1 to 13.1.2

Bitti09/bgp.mom #158

13.1.1 → 13.1.2 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 19 updates

Applesaber/Applesaber.github.io #6

12.6.12 → 12.6.13 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.0.0-beta.9 to 13.0.2

Bitti09/bgp.mom #150

13.0.0-beta.9 → 13.0.2 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 9 updates

UnpixeltGuard/unpixeltguard.github.io #134

12.6.12 → 12.6.13 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

pfncl/blogging #8

12.6.10 → 12.6.12 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the minor-and-patch group with 68 updates

CyberStrikeus/cyberstrike.io #10

12.6.3 → 12.6.12 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump @astrojs/cloudflare from 12.6.10 to 12.6.12

secretfader/propculture #9

12.6.10 → 12.6.12 Patch PR

Closed 5 months ago 1 comment

Bump the npm_and_yarn group across 11 directories with 14 updates

BATUTO90/templates #55

12.6.0 → 12.6.6 Patch PR

Closed 5 months ago 3 comments

Bump the all group across 1 directory with 12 updates

s-thom/botc-script-viewer #23

12.6.10 → 12.6.12 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the production-minor-patch group with 5 updates

CodeAlanDebug/astro-blog #24

12.6.11 → 12.6.12 Patch PR

Closed 6 months ago 2 comments

Bump the patch-updates group across 1 directory with 8 updates

kelvin124124/fuwari #20

12.6.10 → 12.6.12 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.11 to 12.6.12

ahargunyllib/realm #23

12.6.11 → 12.6.12 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the cloudflare group with 2 updates

llu77/-lmm #149

12.6.11 → 12.6.12 Patch PR

Closed 6 months ago 3 comments

chore(deps): bump the dependencies group with 5 updates

cpeaustriajc/cpeaustriajc.dev #44

12.6.11 → 12.6.12 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 6 updates

noonomyen/blog.noonomyen.com #78

12.6.10 → 12.6.11 Patch PR

Closed 6 months ago 1 comment

Bump the patch-updates group across 1 directory with 5 updates

UnpixeltGuard/unpixeltguard.github.io #91

12.6.10 → 12.6.11 Patch PR

Closed 6 months ago 1 comment

Bump the patch-updates group across 1 directory with 4 updates

UnpixeltGuard/unpixeltguard.github.io #90

12.6.10 → 12.6.11 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 12.6.3 to 12.6.6 in /packages/web in the npm_and_yarn group across 1 directory

theAbheekMukherjee/opencode #1

12.6.3 → 12.6.6 Patch PR

Closed 6 months ago 1 comment

Bump the patch-updates group across 1 directory with 9 updates

lwu877/blog #14

12.6.10 → 12.6.11 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 18 updates

sherlockholmestech/sherlockholmestech.github.io #21

12.6.0 → 12.6.10 Patch PR

Closed 7 months ago 2 comments

Bump the patch-updates group across 1 directory with 16 updates

AndreaFrederica/new_blog #24

12.6.7 → 12.6.10 Patch PR

Closed 7 months ago 2 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` 12 months ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 487 (62.3%)

Merged 65 (8.3%)

Closed 202 (25.8%)

PR Types

Major 98 (12.5%)

Minor 156 (19.9%)

Patch 494 (63.2%)