`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 17 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 11 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 19 days ago • updated 11 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

View all 8 advisories

Recent PRs

RSS Feed

chore(deps): bump @astrojs/node from 9.5.3 to 9.5.4

codiume/orbit #1293

9.5.3 → 9.5.4 Patch PR

Open 6 months ago 2 comments

Bump @astrojs/node from 9.5.2 to 9.5.4

TimWitzdam/astro-minimal-portfolio-template #19

9.5.2 → 9.5.4 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump @astrojs/node from 8.3.4 to 9.5.4 in /dev-packages/e2e-tests/test-applications/astro-4

alialobidm/sentry-javascript #14

8.3.4 → 9.5.4 Major PR

Open 6 months ago 2 comments

Bump @astrojs/node from 8.2.6 to 9.5.4

lerndmina/imadam.io #55

8.2.6 → 9.5.4 Major PR

Closed 6 months ago 2 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 24 updates

pixelatedempathy/pixelated #556

9.5.2 → 9.5.4 Patch PR

Open 6 months ago 3 comments

chore(deps): bump the astro group with 3 updates

LanternOps/breeze #153

9.5.1 → 9.5.4 Patch PR

Open 6 months ago 5 comments

chore(deps): bump the production-dependencies group across 1 directory with 11 updates

heridotlife/heridotlife #93

9.5.1 → 9.5.4 Patch PR

Open 6 months ago 4 comments

Bump the npm-production group across 1 directory with 4 updates

nark0001/nabh-agents-in-sdlc #10

9.5.0 → 9.5.4 Patch PR

Closed 6 months ago 1 comment

Bump the minor-and-patch-dependencies group with 8 updates

navikt/familie-ef-mikrofrontend-minside #114

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 11 updates

lilith/starlight #3

8.3.3 → 9.4.1 Major PR

Closed 6 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 5 updates

i-dot-ai/gov-ai-client #94

9.2.1 → 9.4.1 Minor PR

Closed 6 months ago 1 comment

Bump the npm_and_yarn group across 8 directories with 4 updates

Ngocanhphuong/examples #2

8.3.4 → 9.5.4 Major PR

Closed 6 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 56 updates

flowpaycash/flowpay #15

9.5.2 → 9.5.4 Patch PR

Open 6 months ago 6 comments

chore(deps): bump the dependencies group across 1 directory with 56 updates

flowpaycash/flowpay #13

9.5.2 → 9.5.4 Patch PR

Closed 6 months ago 1 comment

build(deps): bump the minor-and-patch group with 2 updates

navikt/sokos-utbetalingsportalen #767

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 3 comments

Bump @astrojs/node from 9.2.2 to 9.4.1 in /client

sombaner/tailspin-toystore #48

9.2.2 → 9.4.1 Minor PR

Closed 6 months ago 1 comment

chore(deps):(deps): bump the production-patches group with 23 updates

pixelatedempathy/pixelated #511

9.5.2 → 9.5.4 Patch PR

Open 6 months ago 4 comments

chore(deps): bump the patch group in /website with 4 updates

loculus-project/loculus #6001

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 55 updates

progwise/george-ai #1012

9.5.1 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

build(deps): Bump @astrojs/node from 9.5.2 to 9.5.3

dslmobilfunkwiki/mobilfunkwiki #83

9.5.2 → 9.5.3 Patch PR

Open 6 months ago 1 comment

chore(deps): bump @astrojs/node from 9.5.2 to 9.5.3

SamTheGeek/sargaux.com #32

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

deps(deps): bump the astro group with 2 updates

naujrevilo/juanoliverdotnetv3 #13

9.5.2 → 9.5.3 Patch PR

Open 6 months ago 3 comments

chore(deps): bump @astrojs/node from 9.5.2 to 9.5.3 in /ui

reconlyeu/reconly #70

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 2 comments

chore(deps): bump the astro-ecosystem group with 2 updates

jakubwalczakk/city-flow #36

9.5.2 → 9.5.3 Patch PR

Open 6 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

heridotlife/heridotlife #87

9.5.1 → 9.5.3 Patch PR

Closed 6 months ago 5 comments

Bump @astrojs/node from 9.5.2 to 9.5.3 in /client in the npm-production group

kxl307/126-kaiworkshop #11

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

Bump the patch-minor group across 1 directory with 11 updates

darthdubu/astro-photo-grid-museum #7

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 11 updates

miaopan607/miaopan-blog #10

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

chore(deps): Bump the minor-and-patch group across 1 directory with 9 updates

carlfrankalbert/nettside_fyrk #137

9.5.2 → 9.5.3 Patch PR

Open 6 months ago 3 comments

chore(deps): bump @astrojs/node from 9.5.2 to 9.5.3 in /client in the npm-production group

GeekTrainer/tailspin-toys-workshop #25

9.5.2 → 9.5.3 Patch PR

Closed 6 months ago 1 comment

Bump @astrojs/node from 8.3.4 to 9.4.1

cvs79/canarypiet #3

8.3.4 → 9.4.1 Major PR

Closed 6 months ago 1 comment

Bump @astrojs/node from 9.4.1 to 9.5.2 in /client

github-samples/pets-workshop #161

9.4.1 → 9.5.2 Minor PR

Closed 6 months ago 3 comments

deps(deps): bump the minor-and-patch group across 1 directory with 53 updates

VigilioYonatan/NEST-ASTROJS-BASE #14

9.5.1 → 9.5.2 Patch PR

Open 6 months ago 6 comments

Bump @astrojs/node from 9.4.4 to 9.5.2 in /client

chaihooli/sun-spike #4

9.4.4 → 9.5.2 Minor PR

Closed 6 months ago 1 comment

Bump @astrojs/node from 8.3.4 to 9.4.1

Christiansava/the-urlist-test1 #12

8.3.4 → 9.4.1 Major PR

Closed 6 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 6 updates

heridotlife/heridotlife #81

9.5.1 → 9.5.2 Patch PR

Open 6 months ago 4 comments

chore(deps): bump the astro group with 3 updates

gathering/tgno-frontend #259

9.4.1 → 9.5.2 Minor PR

Closed 6 months ago 2 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 16 updates

pixelatedempathy/pixelated #331

9.5.1 → 9.5.2 Patch PR

Open 7 months ago 6 comments

Bump the npm_and_yarn group across 19 directories with 24 updates

trizist/bun #35

9.1.3 → 9.4.1 Minor PR

Open 7 months ago 1 comment

build(deps): Bump @astrojs/node from 9.5.1 to 9.5.2

dslmobilfunkwiki/mobilfunkwiki #76

9.5.1 → 9.5.2 Patch PR

Closed 7 months ago 2 comments

deps(deps): bump the minor-and-patch group across 1 directory with 48 updates

VigilioYonatan/NEST-ASTROJS-BASE #12

9.5.1 → 9.5.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump the minor-and-patch group with 6 updates

FlojoInc/floimg-web #98

9.5.1 → 9.5.2 Patch PR

Closed 7 months ago 3 comments

Bump the all-npm-updates group with 4 updates

leo-lem/leolem.dev #156

9.5.1 → 9.5.2 Patch PR

Closed 7 months ago 2 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 16 updates

pixelatedempathy/pixelated #317

9.5.1 → 9.5.2 Patch PR

Open 7 months ago 5 comments

Bump the minor-updates group with 6 updates

w3ctag/w3ctagbot #151

9.5.1 → 9.5.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 14 updates

RoyDust/RealBlog #11

9.5.1 → 9.5.2 Patch PR

Closed 7 months ago 1 comment

Bump the non-major group across 1 directory with 50 updates

filipsobol/sonda #221

9.5.1 → 9.5.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 26 updates

ivanmalikov394/web-check2026 #1

8.2.5 → 9.4.1 Major PR

Open 7 months ago 1 comment

Bump the npm_and_yarn group across 6 directories with 10 updates

AaronJessen/BaseAI #1

8.3.4 → 9.4.1 Major PR

Closed 7 months ago 1 comment

chore(deps): bump the astro group across 1 directory with 6 updates

Trombach/astro-homepage #952

9.5.0 → 9.5.1 Patch PR

Closed 7 months ago 2 comments

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)