An open index of dependabot pull requests across open source projects.

@astrojs/node

Ecosystem:
npm
Package URL:
pkg:npm/@astrojs/node
Total PRs:
1,215 Dependabot PRs
Latest PR:
about 3 hours ago
Unique Repositories:
496 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed
GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago
### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...
Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands
GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 16 days ago
### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...
Astro has Full-Read SSRF in error rendering via Host: header injection
GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 5 months ago • updated 10 days ago
### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...
@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect
GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 18 days ago • updated 10 days ago
### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...
Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago
## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...
Recent PRs
Bump @astrojs/node in /

SaekiTominaga/w0s.jp #1161

10.0.5 → 10.0.6 Patch PR
Closed 3 months ago 2 comments
SaekiTominaga
Package Details
Name: @astrojs/node
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@astrojs/node
JSON API: View JSON
Security Advisories

8

Active advisories
MODERATE 7
LOW 1
View All npm Advisories
Package Information
Description:

Deploy your site to a Node.js server

Repository: https://github.com/withastro/astro
Homepage: https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release: 9.2.2
about 1 year ago
Dependent Repos: 1,089
Dependent Packages: 29
Downloads: 503,259
Ranking: Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs
PR Status
Open 566 (46.6%)
Merged 82 (6.7%)
Closed 545 (44.9%)
PR Types
Major 148 (12.2%)
Minor 697 (57.4%)
Patch 348 (28.6%)