`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
about 23 hours ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 17 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 11 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 19 days ago • updated 11 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

View all 8 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 6 directories with 10 updates

AaronJessen/BaseAI #1

8.3.4 → 9.4.1 Major PR

Closed 7 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 25 updates

raymelguerra/web-check #1

8.2.5 → 9.4.1 Major PR

Open 8 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

yoezequiel/CoreBiz #1

8.3.4 → 9.5.1 Major PR

Closed 8 months ago 2 comments

chore(deps): Bump @astrojs/node from 8.3.4 to 9.5.1

carlfrankalbert/nettside_fyrk #43

8.3.4 → 9.5.1 Major PR

Open 8 months ago 1 comment

deps(npm): bump astro and @astrojs/node in /cieasesoria-web

MaxZeion/cieasesoria-hostinger #6

8.3.4 → 9.5.1 Major PR

Open 8 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

q1blue/edgio-astro-space #18

4.0.0 → 9.5.1 Major PR

Open 8 months ago 1 comment

build(deps): bump @astrojs/node from 8.3.4 to 9.5.1

ecomplus/cloud-commerce #657

8.3.4 → 9.5.1 Major PR

Closed 8 months ago 1 comment

Bump astro, @astrojs/mdx and @astrojs/node

IKatsuba/astro-blog-starter #8

8.3.4 → 9.5.1 Major PR

Closed 9 months ago 1 comment

Bump astro, @astrojs/mdx and @astrojs/node

aoijs/website #246

8.3.4 → 9.4.6 Major PR

Closed 10 months ago 2 comments

chore(deps): bump @astrojs/node from 8.3.4 to 9.4.4 in /apps/web in the npm_and_yarn group across 1 directory

forgepoint-dev/forgepoint #25

8.3.4 → 9.4.4 Major PR

Open 10 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 6 updates

khulnasoft/web-scan #48

8.2.5 → 9.4.1 Major PR

Open 11 months ago

Bump @astrojs/node from 8.2.5 to 9.4.1

khulnasoft-lab/web-scan #3

8.2.5 → 9.4.1 Major PR

Open 11 months ago

build(deps): bump the npm_and_yarn group across 1 directory with 15 updates

xc011-ops/docs-z #1

8.3.4 → 9.4.1 Major PR

Open 11 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

jeff78rb/works-on-woa #4

8.3.4 → 9.4.1 Major PR

Open 11 months ago

build(deps): bump @astrojs/node from 8.3.3 to 9.4.1 in the npm_and_yarn group across 1 directory

enohuang3108/blog #2

8.3.3 → 9.4.1 Major PR

Merged 11 months ago 1 comment

chore(deps): bump @astrojs/node from 8.3.4 to 9.4.3

mocky-balboa/mocky-balboa #6

8.3.4 → 9.4.3 Major PR

Closed 11 months ago 3 comments

Bump @astrojs/node from 8.3.4 to 9.4.1

dj1ch/dj1ch-portfolio #27

8.3.4 → 9.4.1 Major PR

Merged 12 months ago 1 comment

Bump astro and @astrojs/node

kilip/astro-press #7

5.0.0 → 9.4.2 Major PR

Open 12 months ago

build(deps): bump @astrojs/node from 8.3.3 to 9.4.1

0xpekenbower/developer-roadmap #5

8.3.3 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.3.3 to 9.4.1

nichechristie/developer-roadmap #29

8.3.3 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

FredericEspiau/thuit #1

8.3.4 → 9.4.1 Major PR

Open 12 months ago

build(deps): Bump @astrojs/node from 8.3.4 to 9.4.1 in /dev-packages/e2e-tests/test-applications/astro-4

A2Zwholesalediscounters/sentry-javascript #9

8.3.4 → 9.4.1 Major PR

Open 12 months ago

chore(deps-dev): bump @astrojs/node from 8.3.4 to 9.4.1 in /client

kubosho/blog.kubosho.com #2136

8.3.4 → 9.4.1 Major PR

Open 12 months ago 2 comments

chore(deps): bump @astrojs/node from 8.3.4 to 9.4.1 in /dev-packages/e2e-tests/test-applications/astro-4

getsentry/sentry-javascript #17425

8.3.4 → 9.4.1 Major PR

Closed 12 months ago 2 comments

build(deps): bump the npm_and_yarn group across 1 directory with 4 updates

huuquyet/soroban-nft-gallery #31

7.0.4 → 9.4.1 Major PR

Merged 12 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1 in /astro-demo

mariobot/MicrosoftLearn #92

8.3.4 → 9.4.1 Major PR

Merged 12 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

BrightsDays/brightsdays.github.io #33

8.3.4 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

aoijs/website #243

8.3.4 → 9.4.1 Major PR

Open 12 months ago 2 comments

build(deps): bump @astrojs/node from 8.2.5 to 9.4.1

daytonaio/daytona #2268

8.2.5 → 9.4.1 Major PR

Closed 12 months ago 2 comments

Bump @astrojs/node from 8.3.4 to 9.4.1

Ecma-TC54/tc54.org #22

8.3.4 → 9.4.1 Major PR

Open 12 months ago 1 comment

Bump @astrojs/node from 5.3.0 to 9.4.1 in /website

stfc/openday-heatmap #19

5.3.0 → 9.4.1 Major PR

Open 12 months ago

chore(deps): bump @astrojs/node from 6.0.0 to 9.4.1

batur/mvp-web-kit #7

6.0.0 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 5.0.0 to 9.4.1

kilip/astro-press #6

5.0.0 → 9.4.1 Major PR

Closed 12 months ago 1 comment

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1 in the npm_and_yarn group across 1 directory

SeanStaffiery/web-check #25

8.2.5 → 9.4.1 Major PR

Open 12 months ago 1 comment

Bump @astrojs/node from 8.2.5 to 9.4.1

chrismwilliams/astro-authjs-example #1

8.2.5 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.3.4 to 9.4.1

lablnet/lablnet.com #449

8.3.4 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.2.1 to 9.4.1 in /web

kuttysoftmy/awesome-privacy #21

8.2.1 → 9.4.1 Major PR

Open 12 months ago 4 comments

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1

siosios/web-check #2

8.2.5 → 9.4.1 Major PR

Open 12 months ago

Bump @astrojs/node from 8.2.5 to 9.4.1 in /astro-fastify

kou029w/_ #222

8.2.5 → 9.4.1 Major PR

Open 12 months ago

build(deps-dev): bump @astrojs/node from 8.2.5 to 9.4.1

fishke22/web-check #1

8.2.5 → 9.4.1 Major PR

Open 12 months ago

chore(deps): bump @astrojs/node from 8.3.4 to 9.3.2

ecomplus/cloud-commerce #603

8.3.4 → 9.3.2 Major PR

Open about 1 year ago

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

hamirmahal/developer-roadmap #1

8.3.3 → 9.2.2 Major PR

Open about 1 year ago

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

sangshanrupesh/developer-roadmap #8

8.3.4 → 9.2.2 Major PR

Open about 1 year ago 1 comment

Bump @astrojs/node from 8.3.4 to 9.2.2

elchiconube/faedo-digital #1

8.3.4 → 9.2.2 Major PR

Closed about 1 year ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

pynezz/developer-roadmap #1

8.3.2 → 9.2.2 Major PR

Open about 1 year ago

Bump the npm_and_yarn group across 1 directory with 7 updates

FroloEH/KVsite #248

8.3.4 → 9.2.1 Major PR

Open about 1 year ago

Bump astro and @astrojs/node

inovex/scrumlr.io-landing-page #251

8.3.4 → 9.1.3 Major PR

Closed over 1 year ago 2 comments

Bump @astrojs/node from 8.3.4 to 9.1.3

felixicaza/astro-templates #372

8.3.4 → 9.1.3 Major PR

Closed over 1 year ago

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)