`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
7 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated 2 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated 2 days ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated 2 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated 2 days ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated 2 days ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs

RSS Feed

Bump @astrojs/node from 9.0.1 to 9.4.1

aleromano92/aleromano.com #11

9.0.1 → 9.4.1 Minor PR

Merged 10 months ago

chore: bump @astrojs/node from 9.0.0 to 9.4.1 in /examples/astrojs-ssr

contentful/experience-builder #1265

9.0.0 → 9.4.1 Minor PR

Merged 10 months ago 1 comment

build(deps): bump @astrojs/node from 8.3.3 to 9.4.1

0xpekenbower/developer-roadmap #5

8.3.3 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 8.3.3 to 9.4.1

nichechristie/developer-roadmap #29

8.3.3 → 9.4.1 Major PR

Open 10 months ago

chore(deps-dev): bump @astrojs/node from 9.4.0 to 9.4.1

snyssen/webb-launcher #347

9.4.0 → 9.4.1 Patch PR

Closed 10 months ago 1 comment

Bump @astrojs/node from 9.0.2 to 9.4.1

zelenyjan/astro-showcase #6

9.0.2 → 9.4.1 Minor PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.3.2 to 9.4.1 in /website in the npm_and_yarn group

loculus-project/loculus #4866

9.3.2 → 9.4.1 Minor PR

Open 10 months ago 1 comment

Bump @astrojs/node from 9.4.0 to 9.4.1 in the npm_and_yarn group

leo-lem/leolem.dev #110

9.4.0 → 9.4.1 Patch PR

Open 10 months ago 1 comment

Bump @astrojs/node from 8.3.4 to 9.4.1

FredericEspiau/thuit #1

8.3.4 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 9.0.2 to 9.4.1

browser-vm/Nebula-Patched #15

9.0.2 → 9.4.1 Minor PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.0.0 to 9.4.1

Dantescur/shame-jcce #2

9.0.0 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1

SaekiTominaga/w0s.jp #681

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.0.0 to 9.4.1 in /examples/astro

Happy-Horizon/payload #4

9.0.0 → 9.4.1 Minor PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.2.1 to 9.4.1

bartektricks/astro-module-federation #72

9.2.1 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1 in /client

warmachine028/pets-updates #12

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.3.3 to 9.4.1

ReeceRose/Website #50

9.3.3 → 9.4.1 Minor PR

Open 10 months ago

build(deps): bump @astrojs/node from 9.1.3 to 9.4.1

codefortulsa/tgov-scraper-js #14

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1 in /plant-website

tolgabalper/school-project #8

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.0.0 to 9.4.1 in /examples/astro

earth-sol/payload #4

9.0.0 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.3.0 to 9.4.1

thebaconfate/tvat-website #17

9.3.0 → 9.4.1 Minor PR

Merged 10 months ago

Bump @astrojs/node from 9.2.2 to 9.4.1

munichmakerlab/website #45

9.2.2 → 9.4.1 Minor PR

Open 10 months ago 1 comment

Bump @astrojs/node from 9.2.0 to 9.4.1

CM-CA/bike-tracker #18

9.2.0 → 9.4.1 Minor PR

Open 10 months ago

build(deps): bump @astrojs/node from 9.3.0 to 9.4.1

navikt/leesah-game #198

9.3.0 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.2.1 to 9.4.1

adoupas/personal-website #2

9.2.1 → 9.4.1 Minor PR

Merged 10 months ago

Bump @astrojs/node from 9.2.1 to 9.4.1

navikt/tms-microfrontend-template-ssr #9

9.2.1 → 9.4.1 Minor PR

Closed 10 months ago 1 comment

Bump Astro and adapters

kytta/share2fedi #105

9.0.2 → 9.4.1 Minor PR

Merged 10 months ago 3 comments

build(deps): Bump @astrojs/node from 8.3.4 to 9.4.1 in /dev-packages/e2e-tests/test-applications/astro-4

A2Zwholesalediscounters/sentry-javascript #9

8.3.4 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1 in /client

2025-Tech-Forum/jessica-horton #10

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1 in /client

2025-Tech-Forum/lchen-milliman #11

9.1.3 → 9.4.1 Minor PR

Open 10 months ago

chore(deps-dev): bump @astrojs/node from 8.3.4 to 9.4.1 in /client

kubosho/blog.kubosho.com #2136

8.3.4 → 9.4.1 Major PR

Open 10 months ago 2 comments

chore(deps): bump @astrojs/node from 8.3.4 to 9.4.1 in /dev-packages/e2e-tests/test-applications/astro-4

getsentry/sentry-javascript #17425

8.3.4 → 9.4.1 Major PR

Closed 10 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 4 updates

huuquyet/soroban-nft-gallery #31

7.0.4 → 9.4.1 Major PR

Merged 10 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1 in /astro-demo

mariobot/MicrosoftLearn #92

8.3.4 → 9.4.1 Major PR

Merged 10 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

aoijs/website #243

8.3.4 → 9.4.1 Major PR

Open 10 months ago 2 comments

Bump @astrojs/node from 8.3.4 to 9.4.1

BrightsDays/brightsdays.github.io #33

8.3.4 → 9.4.1 Major PR

Open 10 months ago

build(deps): bump @astrojs/node from 8.2.5 to 9.4.1

daytonaio/daytona #2268

8.2.5 → 9.4.1 Major PR

Closed 10 months ago 2 comments

Bump @astrojs/node from 8.3.4 to 9.4.1

Ecma-TC54/tc54.org #22

8.3.4 → 9.4.1 Major PR

Open 10 months ago 1 comment

Bump @astrojs/node from 5.3.0 to 9.4.1 in /website

stfc/openday-heatmap #19

5.3.0 → 9.4.1 Major PR

Open 10 months ago

chore(deps): bump @astrojs/node from 6.0.0 to 9.4.1

batur/mvp-web-kit #7

6.0.0 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 5.0.0 to 9.4.1

kilip/astro-press #6

5.0.0 → 9.4.1 Major PR

Closed 10 months ago 1 comment

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1 in the npm_and_yarn group across 1 directory

SeanStaffiery/web-check #25

8.2.5 → 9.4.1 Major PR

Open 10 months ago 1 comment

Bump @astrojs/node from 8.2.5 to 9.4.1

chrismwilliams/astro-authjs-example #1

8.2.5 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

lablnet/lablnet.com #449

8.3.4 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 8.2.1 to 9.4.1 in /web

kuttysoftmy/awesome-privacy #21

8.2.1 → 9.4.1 Major PR

Open 10 months ago 4 comments

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1

siosios/web-check #2

8.2.5 → 9.4.1 Major PR

Open 10 months ago

Bump @astrojs/node from 8.2.5 to 9.4.1 in /astro-fastify

kou029w/_ #222

8.2.5 → 9.4.1 Major PR

Open 10 months ago

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1

fishke22/web-check #1

8.2.5 → 9.4.1 Major PR

Open 10 months ago

chore(deps): bump @astrojs/node from 9.4.1 to 9.4.2

CNSeniorious000/free-chat #694

9.4.1 → 9.4.2 Patch PR

Closed 10 months ago 2 comments

chore(deps): bump the astro group across 1 directory with 4 updates

Trombach/astro-homepage #889

9.3.3 → 9.4.2 Minor PR

Open 10 months ago 1 comment

Bump the minor-updates group across 1 directory with 6 updates

RaitonRed/raiton-void #17

9.2.2 → 9.4.1 Minor PR

Open 10 months ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)