`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated about 21 hours ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated about 21 hours ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated about 21 hours ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated about 21 hours ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated about 21 hours ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

deps(site)(deps): bump the astro group across 1 directory with 6 updates

WenzelArifiandi/ariane #147

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 2 comments

chore(deps): bump the astro group across 1 directory with 4 updates

Trombach/astro-homepage #924

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 2 comments

Bump the patch-updates group across 1 directory with 14 updates

RaitonRed/raiton #31

9.4.2 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group in /client with 3 updates

Gopi-Pitchai/copilot-agent-001 #2

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 8 updates

TheShadowEevee/blog #26

9.4.0 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Build(deps): Bump the patch-updates group across 1 directory with 7 updates

jhl-hk/blogs #33

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group in /client with 4 updates

element824/agents-in-sdlc #2

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group in /client with 4 updates

AOCC-Org-POC-First-Phase/tina11lin #2

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group in /client with 4 updates

Howard-Gu-Work/agents-in-sdlc-howard1 #2

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 1 comment

Bump the astro group in /app with 3 updates

poad/astro-lambda-ssr-example #249

9.4.3 → 9.4.4 Patch PR

Merged 9 months ago

build(deps): bump the minor-and-patch group with 4 updates

navikt/sokos-utbetalingsportalen #625

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

chore(deps): bump the astro group with 4 updates

go-vikunja/website #204

9.4.3 → 9.4.4 Patch PR

Merged 9 months ago 1 comment

deps(docs): bump the prod-deps group across 1 directory with 18 updates

dearealeo/Library #64

9.4.2 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

deps(site)(deps): bump the astro group in /site with 5 updates

WenzelArifiandi/ariane #130

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 1 comment

Bump @astrojs/node from 9.4.3 to 9.4.4

Nikos-Stuff/web #246

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 4 updates

harshitmehta15/agents-copilot-workshop #4

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 3 updates

teogroza/sdlc-se #4

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 4 updates

tadfat/ageents-in-sdlk-tad #6

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 4 updates

AOCC-Org-POC-First-Phase/agent-in-sdlc-cheryl #12

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump @astrojs/node from 9.4.3 to 9.4.4

maik-hasler/blogfolio #25

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump @astrojs/node from 9.4.3 to 9.4.4

0x346e3730/clauzier.dev #207

9.4.3 → 9.4.4 Patch PR

Merged 9 months ago

Bump the npm-production group across 1 directory with 4 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton3RR #12

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

chore(website): bump the minorandpatch group in /website with 6 updates

GenSpectrum/dashboards #829

9.4.3 → 9.4.4 Patch PR

Merged 9 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

AShakoorMelb/se-copilot-workshops #5

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 4 updates

CarolynChenAS/agents-in-sdlc-carolyn #14

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 4 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton2 #14

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

Pavithra894/Pavithra894 #5

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 2 updates

se-copilot-workshops/agents-in-sdlc #19

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

pedaganim/maddy-agents-copilot #5

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump the astro group across 1 directory with 3 updates

Trombach/astro-homepage #921

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 2 comments

Bump the npm-production group in /client with 2 updates

horihiro/pets-workshop #9

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump @astrojs/node from 9.4.2 to 9.4.4

cobaltwebtech/marzellusco-prod #129

9.4.2 → 9.4.4 Patch PR

Open 9 months ago 1 comment

Bump the npm-production group across 1 directory with 4 updates

joanne1wu/agents-in-sdlc-joanne #19

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

maxine-janka/github-connect-workshop #9

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump the patch-updates group across 1 directory with 15 updates

RaitonRed/raiton #30

9.4.2 → 9.4.4 Patch PR

Closed 9 months ago 2 comments

security(deps): bump the astro-ecosystem group with 3 updates

dvelasquez/myrandomcalendar #9

9.4.3 → 9.4.4 Patch PR

Closed 9 months ago 1 comment

Bump @astrojs/node from 9.0.0 to 9.0.3

bdub101112/free.math-equations #45

9.0.0 → 9.0.3 Patch PR

Open 9 months ago

chore(deps): bump the patch-updates group across 1 directory with 9 updates

TheShadowEevee/blog #25

9.4.0 → 9.4.3 Patch PR

Closed 9 months ago 1 comment

deps(docs): bump the prod-deps group in /docs with 17 updates

dearealeo/Library #61

9.4.2 → 9.4.3 Patch PR

Open 9 months ago

Bump the patch-updates group with 14 updates

RaitonRed/raiton #29

9.4.2 → 9.4.3 Patch PR

Open 9 months ago

chore(deps): bump the patch-updates group across 1 directory with 8 updates

TheShadowEevee/blog #24

9.4.0 → 9.4.3 Patch PR

Open 9 months ago 1 comment

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 27 updates

arcjet/arcjet-docs #633

9.4.2 → 9.4.3 Patch PR

Open 9 months ago 1 comment

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 24 updates

arcjet/arcjet-docs #631

9.4.2 → 9.4.3 Patch PR

Open 9 months ago 4 comments

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 23 updates

arcjet/arcjet-docs #630

9.4.2 → 9.4.3 Patch PR

Closed 9 months ago 4 comments

chore(deps): bump the npm-version-updates group across 1 directory with 8 updates

zitadel/example-auth-astro #5

9.4.0 → 9.4.3 Patch PR

Closed 9 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 8 updates

TheShadowEevee/blog #23

9.4.0 → 9.4.3 Patch PR

Open 9 months ago

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 19 updates

arcjet/arcjet-docs #627

9.4.2 → 9.4.3 Patch PR

Open 9 months ago 2 comments

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 18 updates

arcjet/arcjet-docs #625

9.4.2 → 9.4.3 Patch PR

Open 9 months ago 1 comment

chore(website): bump the minorandpatch group across 1 directory with 19 updates

GenSpectrum/dashboards #796

9.4.2 → 9.4.3 Patch PR

Merged 9 months ago 1 comment

Bump the non-major group across 1 directory with 45 updates

filipsobol/sonda #179

9.4.1 → 9.4.3 Patch PR

Open 9 months ago 2 comments

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)