`@astrojs/cloudflare`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/cloudflare

Total PRs:
783 Dependabot PRs

Latest PR:
about 14 hours ago

Unique Repositories:
320 repositories

Unique Repos (30 days):
41 repositories

Security Advisories

Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

GHSA-qpr4-c339-7vq8 CVE-2025-58179 HIGH published 9 months ago • updated 2 days ago

### Summary When using Astro's Cloudflare adapter (`@astrojs/cloudflare`) configured with `output: 'server'` while using the default `imageService...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

GHSA-88gm-j2wx-58h6 CVE-2026-41321 LOW published about 1 month ago • updated 2 days ago

## Summary The `fetch()` call for remote images in `packages/integrations/cloudflare/src/utils/image-binding-transform.ts` (line 28) uses the defa...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the minor-and-patch group with 7 updates

fune-gaku/member-site-template-public #77

13.5.2 → 13.5.4 Patch PR

Open 8 days ago 2 comments

build(deps): bump the npm_and_yarn group across 2 directories with 6 updates

tsukasa-u/FUSOU #182

13.1.5 → 13.1.10 Patch PR

Open 9 days ago 3 comments

chore(deps): bump @astrojs/cloudflare from 13.5.1 to 13.5.4

leowla/leowla.com #27

13.5.1 → 13.5.4 Patch PR

Open 11 days ago 1 comment

Bump @astrojs/cloudflare from 13.5.2 to 13.5.3

anephenix/ui #423

13.5.2 → 13.5.3 Patch PR

Open 12 days ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.5.1 to 13.5.2

leowla/leowla.com #21

13.5.1 → 13.5.2 Patch PR

Closed 13 days ago 2 comments

chore(deps): bump the minor-and-patch group with 10 updates

fune-gaku/member-site-template-public #69

13.5.0 → 13.5.1 Patch PR

Open 15 days ago 2 comments

Bump @astrojs/cloudflare from 13.3.0 to 13.3.1

anephenix/ui #403

13.3.0 → 13.3.1 Patch PR

Open 28 days ago 2 comments

build(deps): bump the npm_and_yarn group across 2 directories with 5 updates

tsukasa-u/FUSOU #177

13.1.5 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

chore(deps): bump the astro group with 3 updates

kiakiraki/blog #276

13.2.1 → 13.2.2 Patch PR

Open about 1 month ago 1 comment

deps(deps): bump the minor-and-patch group across 1 directory with 7 updates

kjfsm/notion-headless-cms #113

13.2.0 → 13.2.1 Patch PR

Open about 1 month ago 3 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.10 in the npm_and_yarn group across 1 directory

johnpangalos/blog.pangalos.dev #42

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump the patch-updates group with 15 updates

GZ-Dennell/NT-Hicity #1

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 1 comment

chore(deps-dev): bump @astrojs/cloudflare from 13.1.8 to 13.1.10

omawhite/Cicada-Cinema #15

13.1.8 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

Bump the patch-updates group with 15 updates

Gaosane/MYWBlog #18

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 3 updates

ahliweb/awcms #100

13.1.7 → 13.1.10 Patch PR

Open about 1 month ago 3 comments

Bump @astrojs/cloudflare from 13.1.9 to 13.1.10 in the npm_and_yarn group across 1 directory

aerospeedsta/aerospeedsta-astro #2

13.1.9 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.7 to 13.1.10

cytsai1008/kenichi-profile #8

13.1.7 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

Bump @astrojs/cloudflare from 13.1.9 to 13.1.10

letsbuilda/letsbuilda.dev #52

13.1.9 → 13.1.10 Patch PR

Closed about 1 month ago 1 comment

chore: Bump @astrojs/cloudflare from 13.1.9 to 13.1.10

shogo-tanaka-work/shogo-works #84

13.1.9 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

chore(deps):(deps): bump @astrojs/cloudflare from 13.1.8 to 13.1.10

alehar9320/astro-cloudflare-personal-website #130

13.1.8 → 13.1.10 Patch PR

Closed about 1 month ago 3 comments

pnpm: bump @astrojs/cloudflare from 13.1.6 to 13.1.10

anonrig/yagiz.co #191

13.1.6 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.3 to 13.1.10

PetroSilenius/euribor-rates #19

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 13.1.7 to 13.1.10

sdldev/portalonline-id #17

13.1.7 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.2 to 13.1.10

cloudflare/research.cloudflare.com #233

13.1.2 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.3 to 13.1.10

musosoft/lamateam-web #90

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.10

philnash/philna.sh #81

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

build(deps): bump @astrojs/cloudflare from 13.1.6 to 13.1.10

ersintarhan/blog #7

13.1.6 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 6 updates

kooymansfinds/opencode #3

12.6.3 → 12.6.6 Patch PR

Closed about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

nordicfactory/lumicode #14

12.6.3 → 12.6.6 Patch PR

Open about 1 month ago 2 comments

Bump the patch-updates group across 1 directory with 15 updates

LLGY0/LLGY0.github.io #7

12.6.12 → 12.6.13 Patch PR

Closed about 1 month ago 2 comments

chore: bump @astrojs/cloudflare from 13.1.8 to 13.1.10

futurekittylabs/kittynode #1114

13.1.8 → 13.1.10 Patch PR

Open about 1 month ago 1 comment

Bump @astrojs/cloudflare from 13.1.3 to 13.1.10

akasaya/cinamoroll-fan-site #7

13.1.3 → 13.1.10 Patch PR

Open about 1 month ago 2 comments

Bump the patch-updates group across 1 directory with 20 updates

jiashun-wang/twilight #10

12.6.12 → 12.6.13 Patch PR

Open about 1 month ago 3 comments

Bump the minor-and-patch group with 10 updates

akshitkrnagpal/edgepush #10

13.1.9 → 13.1.10 Patch PR

Closed about 1 month ago 2 comments

Bump the patch-updates group across 1 directory with 20 updates

Applesaber/Applesaber.github.io #7

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

StankySpence/opencode #4

12.6.3 → 12.6.6 Patch PR

Open about 2 months ago 2 comments

Bump the patch-updates group across 1 directory with 20 updates

Yuanjia-Lee/Yuanjia-Lee.github.io #9

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

Happy8bit/MZTwilight #8

12.6.12 → 12.6.13 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the patch-updates group in /www with 2 updates

clef-sh/clef #149

13.1.6 → 13.1.9 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 6 updates

iansherr/opencode #1

12.6.3 → 12.6.6 Patch PR

Closed about 2 months ago 3 comments

build(deps): bump the npm_and_yarn group across 5 directories with 7 updates

LeXwDeX/opencode #5

12.6.3 → 12.6.6 Patch PR

Open about 2 months ago 2 comments

Bump @astrojs/cloudflare from 13.1.8 to 13.1.9

s5bug/aly.fish #221

13.1.8 → 13.1.9 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump the minor-patch group across 1 directory with 14 updates

MichaelFisher1997/staticfish-v2 #29

13.1.3 → 13.1.8 Patch PR

Closed about 2 months ago 2 comments

Bump @astrojs/cloudflare from 13.1.3 to 13.1.8

akasaya/cinamoroll-fan-site #6

13.1.3 → 13.1.8 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.8

raiga0310/profile.a6x.dev_2026 #56

13.1.4 → 13.1.8 Patch PR

Open about 2 months ago 3 comments

Bump the astro group with 3 updates

koji-1009/tabisaki-demo #10

13.1.6 → 13.1.7 Patch PR

Open about 2 months ago 1 comment

chore(deps): bump @astrojs/cloudflare from 13.1.4 to 13.1.8

Bitti09/bgp.mom #180

13.1.4 → 13.1.8 Patch PR

Closed about 2 months ago 2 comments

Bump the patch-updates group with 15 updates

Atopos-jy/Blog #1

12.6.12 → 12.6.13 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 17 directories with 8 updates

NeuroLift-Technologies/templates #8

12.6.0 → 12.6.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 6 updates

StankySpence/opencode #2

12.6.3 → 12.6.6 Patch PR

Closed about 2 months ago 4 comments

Package Details

Name:	`@astrojs/cloudflare`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/cloudflare`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to Cloudflare Workers/Pages

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/cloudflare/
Latest Release:	`12.5.4` 12 months ago
Dependent Repos:	102
Dependent Packages:	8
Downloads:	210,893
Ranking:	Top 1.4144% by dependent repos Top 1.0254% by downloads Top 3.1526% by dependent pkgs

PR Status

Open 487 (62.3%)

Merged 65 (8.3%)

Closed 202 (25.8%)

PR Types

Major 98 (12.5%)

Minor 156 (19.9%)

Patch 494 (63.2%)