`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
8 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated 3 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated about 1 hour ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated about 1 hour ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated about 1 hour ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated about 1 hour ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs

RSS Feed

Bump @astrojs/node from 9.2.2 to 9.3.0 in /client

MissyMazur/Agentdevops #4

9.2.2 → 9.3.0 Minor PR

Open 11 months ago

Bump @astrojs/node from 9.2.2 to 9.3.0 in /client

ckellywilson/agents-in-sdlc #4

9.2.2 → 9.3.0 Minor PR

Closed 11 months ago 1 comment

chore(deps): bump the minor group in /website with 8 updates

loculus-project/loculus #4732

9.2.2 → 9.3.0 Minor PR

Open 11 months ago

chore(deps): bump the prod-deps group with 4 updates

digitalmint/astro-shield #27

9.2.2 → 9.3.0 Minor PR

Merged 11 months ago

Bump @astrojs/node from 9.2.2 to 9.3.0 in /client

github-samples/agents-in-sdlc #62

9.2.2 → 9.3.0 Minor PR

Merged 11 months ago

chore(deps): bump the patch-minor group across 1 directory with 7 updates

ebarcly/astragarde #33

9.2.2 → 9.3.0 Minor PR

Open 11 months ago 2 comments

chore(deps): bump the prod-deps group across 1 directory with 4 updates

digitalmint/astro-shield #25

9.2.2 → 9.3.0 Minor PR

Closed 11 months ago 1 comment

Build(deps): Bump the minor-updates group with 3 updates

jhl-hk/blogs #14

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 1 comment

build(deps): Bump @astrojs/node from 9.2.2 to 9.3.0

dslmobilfunkwiki/mobilfunkwiki #26

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.2.2 to 9.3.0

elchiconube/faedo-digital #16

9.2.2 → 9.3.0 Minor PR

Merged 12 months ago

build(deps): bump @astrojs/node from 9.2.1 to 9.3.0

Project37/travislolsite #20

9.2.1 → 9.3.0 Minor PR

Closed 12 months ago 1 comment

chore(deps): bump the minor group in /website with 6 updates

loculus-project/loculus #4632

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 2 comments

build(deps): bump the npm group with 2 updates

navikt/leesah-game #194

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

chore(deps): bump the patch-minor group with 6 updates

ebarcly/astragarde #32

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 3 comments

chore(deps): bump the prod-deps group across 1 directory with 3 updates

digitalmint/astro-shield #24

9.2.2 → 9.3.0 Minor PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.0.0 to 9.3.0

hkbertoson/astro-turnstile #214

9.0.0 → 9.3.0 Minor PR

Open 12 months ago 2 comments

Bump the minor-updates group with 9 updates

w3ctag/w3ctagbot #60

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 1 comment

chore(deps): bump the dependencies group with 9 updates

ktym4a/astro-page-insight #187

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.2.2 to 9.3.0

maik-hasler/blogfolio #2

9.2.2 → 9.3.0 Minor PR

Merged 12 months ago

Bump @astrojs/node from 9.1.3 to 9.3.0

Phu404fake/Bom #43

9.1.3 → 9.3.0 Minor PR

Closed 12 months ago 2 comments

Bump the minor-updates group across 1 directory with 3 updates

RaitonRed/raiton-void #9

9.2.2 → 9.3.0 Minor PR

Open 12 months ago 2 comments

Bump the astro group in /app with 2 updates

poad/astro-lambda-ssr-example #201

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

chore(deps): Bump the astro group with 2 updates

dossierhq/dossierhq #1357

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

deps(example): bump @astrojs/node from 9.2.2 to 9.3.0 in /examples/astro-integration in the dependencies group

arcjet/arcjet-js #4559

9.2.2 → 9.3.0 Minor PR

Open 12 months ago 2 comments

Update pnpm dependencies : Bump @astrojs/node from 9.2.2 to 9.3.0

pierregueroult/portfolio-2k25 #211

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 2 comments

build(deps): bump the framework group across 1 directory with 2 updates

krudi/astro-template #236

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

chore(deps): bump the astro group with 2 updates

go-vikunja/website #143

9.2.2 → 9.3.0 Minor PR

Merged 12 months ago 1 comment

Bump @astrojs/node from 9.2.2 to 9.3.0

Nikos-Stuff/web #190

9.2.2 → 9.3.0 Minor PR

Merged 12 months ago

Bump @astrojs/node from 9.2.1 to 9.3.0

Lunar-Proxy/lunar-v1 #231

9.2.1 → 9.3.0 Minor PR

Closed 12 months ago 1 comment

Bump @astrojs/node from 9.2.2 to 9.3.0

0x346e3730/clauzier.dev #146

9.2.2 → 9.3.0 Minor PR

Merged 12 months ago

chore(deps): bump @astrojs/node from 9.2.2 to 9.3.0

CNSeniorious000/free-chat #576

9.2.2 → 9.3.0 Minor PR

Closed 12 months ago 2 comments

chore(deps): bump the astro group with 2 updates

Trombach/astro-homepage #855

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

deps(docs): bump the prod-deps group in /docs with 2 updates

dearealeo/Library #29

9.2.2 → 9.3.0 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

hamirmahal/developer-roadmap #1

8.3.3 → 9.2.2 Major PR

Open about 1 year ago

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

sangshanrupesh/developer-roadmap #8

8.3.4 → 9.2.2 Major PR

Open about 1 year ago 1 comment

Bump @astrojs/node from 8.3.4 to 9.2.2

elchiconube/faedo-digital #1

8.3.4 → 9.2.2 Major PR

Closed about 1 year ago 1 comment

chore: bump the npm-deps group with 37 updates

sierlin/420- #2

9.1.3 → 9.2.2 Minor PR

Open about 1 year ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

pynezz/developer-roadmap #1

8.3.2 → 9.2.2 Major PR

Open about 1 year ago

chore(deps): bump the prod-dependencies group with 6 updates

CarlosVilasAlvarez/carlosvilasdev #19

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago

Bump @astrojs/node from 9.0.0 to 9.2.2

Evaxle/GamewebV2 #4

9.0.0 → 9.2.2 Minor PR

Open about 1 year ago 1 comment

chore(deps): bump @astrojs/node from 9.0.0 to 9.2.2

FerKoMus10/TheBigotNetwork #52

9.0.0 → 9.2.2 Minor PR

Open about 1 year ago

Bump @astrojs/node from 9.0.0 to 9.2.2

bdub101112/free.math-equations #8

9.0.0 → 9.2.2 Minor PR

Closed about 1 year ago 3 comments

chore(deps): bump the patch group across 1 directory with 8 updates

loculus-project/loculus #4217

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago

Bump @astrojs/node from 9.2.1 to 9.2.2

Lunar-Proxy/lunar-v1 #204

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago

build(deps): bump @astrojs/node from 9.2.1 to 9.2.2

Project37/travislolsite #9

9.2.1 → 9.2.2 Patch PR

Closed about 1 year ago 1 comment

chore(website): bump the minorandpatch group in /website with 8 updates

GenSpectrum/dashboards #698

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago

build(deps): bump @astrojs/node from 9.2.1 to 9.2.2

dslmobilfunkwiki/dslwiki #17

9.2.1 → 9.2.2 Patch PR

Closed about 1 year ago 1 comment

chore(deps): bump the patch group across 1 directory with 7 updates

loculus-project/loculus #4208

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago

chore(deps): bump the prod-deps group with 4 updates

digitalmint/astro-shield #17

9.2.1 → 9.2.2 Patch PR

Merged about 1 year ago

Bump the minor-and-patch group with 6 updates

navikt/sokos-utbetalingsportalen #531

9.2.1 → 9.2.2 Patch PR

Open about 1 year ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)