`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
about 14 hours ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 16 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 10 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 18 days ago • updated 10 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

View all 8 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

heridotlife/heridotlife #55

9.5.0 → 9.5.1 Patch PR

Open 9 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 47 updates

progwise/george-ai #884

9.5.0 → 9.5.1 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 5 updates

tkopacz/pltk-fy26-agnets-in-sdlc #3

9.5.0 → 9.5.1 Patch PR

Closed 9 months ago 1 comment

Bump @astrojs/node from 9.4.3 to 9.4.5

iceycolduser/arcticmath #2

9.4.3 → 9.4.5 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

tadfat/ageents-in-sdlk-tad #10

9.4.3 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton3RR #20

9.4.3 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

build(deps): bump @astrojs/node from 9.4.2 to 9.4.5

dslmobilfunkwiki/dslwiki #75

9.4.2 → 9.4.5 Patch PR

Closed 10 months ago 2 comments

Bump the npm-production group in /client with 2 updates

se-copilot-workshops/agents-in-sdlc #26

9.4.4 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

joanne1wu/agents-in-sdlc-joanne #27

9.4.3 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-harry #10

9.4.3 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton1 #22

9.4.3 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

Build(deps): Bump the patch-updates group across 1 directory with 3 updates

jhl-hk/blogs #46

9.4.4 → 9.4.6 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump the astro group across 1 directory with 5 updates

Trombach/astro-homepage #930

9.4.3 → 9.4.4 Patch PR

Open 10 months ago 2 comments

Bump the npm-production group across 1 directory with 3 updates

teogroza/sdlc-se #11

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 3 updates

horihiro/pets-workshop #13

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

build(deps): bump the npm group across 1 directory with 3 updates

navikt/leesah-game #204

9.4.1 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

GinaWangg/0922_test #18

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 3 updates

justinkelly/github-agents-in-sdlc #10

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump @astrojs/node from 9.4.3 to 9.4.4

inovex/scrumlr.io-landing-page #291

9.4.3 → 9.4.4 Patch PR

Merged 10 months ago

deps(docs): bump the prod-deps group across 1 directory with 19 updates

dearealeo/Library #79

9.4.2 → 9.4.4 Patch PR

Open 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 10 updates

TheShadowEevee/blog #31

9.4.0 → 9.4.4 Patch PR

Merged 10 months ago

Bump the patch-updates group across 1 directory with 14 updates

RaitonRed/raiton #33

9.4.2 → 9.4.4 Patch PR

Open 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 9 updates

TheShadowEevee/blog #29

9.4.0 → 9.4.4 Patch PR

Closed 10 months ago 2 comments

build(deps): bump @astrojs/node from 9.4.3 to 9.4.4

jrg-tools/jorgechato.com #9

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-dependencies group in /frontend with 12 updates

usuyuki/usuyuki_blog_v2 #226

9.4.3 → 9.4.4 Patch PR

Merged 10 months ago

chore(deps): bump the patch-updates group across 1 directory with 8 updates

TheShadowEevee/blog #28

9.4.0 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump @astrojs/node from 9.4.3 to 9.4.4

jirihofman/hungry-but-cannot-decide-what-to-order #95

9.4.3 → 9.4.4 Patch PR

Open 10 months ago 1 comment

chore(deps): bump the astro group with 3 updates

dossierhq/dossier-astro-sqlite-app #220

9.4.3 → 9.4.4 Patch PR

Merged 10 months ago

Bump the npm-production group across 1 directory with 2 updates

harshitmehta15/agents-copilot-workshop #6

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton3RR #18

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

teogroza/sdlc-se #8

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agent-in-sdlc-cheryl #15

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

CarolynChenAS/agents-in-sdlc-carolyn #18

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton2 #18

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump @astrojs/node from 9.4.3 to 9.4.4

Turbo-V8-14259/website #42

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump @astrojs/node from 9.4.3 to 9.4.4 in /client in the npm-production group across 1 directory

se-copilot-workshops/agents-in-sdlc #21

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 2 updates

AShakoorMelb/se-copilot-workshops #7

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 2 updates

pedaganim/maddy-agents-copilot #6

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump @astrojs/node from 9.4.3 to 9.4.4 in /client in the npm-production group across 1 directory

horihiro/pets-workshop #10

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

chore(deps): bump the patch group in /website with 9 updates

loculus-project/loculus #5129

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

joanne1wu/agents-in-sdlc-joanne #24

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group in /client with 2 updates

maxine-janka/github-connect-workshop #12

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

security(deps): bump the astro-ecosystem group across 1 directory with 4 updates

dvelasquez/myrandomcalendar #15

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

justinkelly/github-agents-in-sdlc #9

9.4.3 → 9.4.4 Patch PR

Closed 10 months ago 1 comment

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton1 #18

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-tad #11

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

Bump the npm-production group across 1 directory with 2 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton3 #16

9.4.3 → 9.4.4 Patch PR

Open 10 months ago

chore(deps): bump the dependencies group across 1 directory with 15 updates

ktym4a/astro-page-insight #199

9.4.3 → 9.4.4 Patch PR

Merged 10 months ago

Bump the patch-updates group across 1 directory with 13 updates

RaitonRed/raiton #32

9.4.2 → 9.4.4 Patch PR

Closed 11 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 7 updates

TheShadowEevee/blog #27

9.4.0 → 9.4.4 Patch PR

Closed 11 months ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)