`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated 1 day ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated 1 day ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated 1 day ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated 1 day ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated 1 day ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs

RSS Feed

Bump @astrojs/node from 9.1.3 to 9.4.1

alebonora/aldobonora #14

9.1.3 → 9.4.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 11 updates

heridotlife/heridotlife #56

9.5.0 → 9.5.1 Patch PR

Open 6 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 47 updates

progwise/george-ai #917

9.5.0 → 9.5.1 Patch PR

Closed 7 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

q1blue/edgio-astro-space #18

4.0.0 → 9.5.1 Major PR

Open 7 months ago 1 comment

chore(website): bump the minorandpatch group across 1 directory with 30 updates

GenSpectrum/dashboards #936

9.4.4 → 9.5.1 Minor PR

Open 7 months ago 1 comment

build(deps): bump @astrojs/node from 8.3.4 to 9.5.1

ecomplus/cloud-commerce #657

8.3.4 → 9.5.1 Major PR

Closed 7 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 24 updates

ktym4a/astro-page-insight #207

9.4.4 → 9.5.1 Minor PR

Closed 7 months ago 1 comment

Bump the non-major group across 1 directory with 38 updates

filipsobol/sonda #202

9.5.0 → 9.5.1 Patch PR

Open 7 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

heridotlife/heridotlife #55

9.5.0 → 9.5.1 Patch PR

Open 7 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 47 updates

progwise/george-ai #884

9.5.0 → 9.5.1 Patch PR

Closed 7 months ago 1 comment

⬆️ Bump @astrojs/node from 9.0.0 to 9.4.1

navikt/aap-min-side-microfrontend #117

9.0.0 → 9.4.1 Minor PR

Open 7 months ago 2 comments

Bump astro, @astrojs/mdx and @astrojs/node

IKatsuba/astro-blog-starter #8

8.3.4 → 9.5.1 Major PR

Closed 7 months ago 1 comment

Bump the npm-production group across 1 directory with 5 updates

tkopacz/pltk-fy26-agnets-in-sdlc #3

9.5.0 → 9.5.1 Patch PR

Closed 7 months ago 1 comment

build(deps): bump @astrojs/node from 9.1.2 to 9.4.1

dewodt/portfolio #19

9.1.2 → 9.4.1 Minor PR

Open 7 months ago 1 comment

chore(website): bump the minorandpatch group across 1 directory with 27 updates

GenSpectrum/dashboards #899

9.4.4 → 9.5.0 Minor PR

Open 8 months ago 2 comments

Bump the minor-and-patch-dependencies group across 1 directory with 12 updates

navikt/familie-ef-mikrofrontend-minside #64

9.0.0 → 9.5.0 Minor PR

Closed 8 months ago 1 comment

chore(deps): bump the npm-version-updates group with 11 updates

zitadel/example-auth-astro #12

9.4.1 → 9.5.0 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.4.3 to 9.4.5

iceycolduser/arcticmath #2

9.4.3 → 9.4.5 Patch PR

Closed 8 months ago 1 comment

chore(frontend)(deps): update @astrojs/node requirement from ^9.4.3 to ^9.5.0 in /frontend

Whyknot-live/whyknot.live #8

^9.4.3 → ^9.5.0 Minor PR

Open 8 months ago 1 comment

deps(site)(deps): bump the astro group across 1 directory with 6 updates

WenzelArifiandi/ariane #215

9.4.3 → 9.5.0 Minor PR

Open 8 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 21 updates

pixelatedempathy/pixelated #101

9.4.6 → 9.5.0 Minor PR

Open 8 months ago 1 comment

deps(site)(deps): bump the astro group across 1 directory with 8 updates

WenzelArifiandi/ariane #205

9.4.3 → 9.5.0 Minor PR

Open 8 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 17 updates

pixelatedempathy/pixelated #94

9.4.6 → 9.5.0 Minor PR

Open 8 months ago 1 comment

Bump the minor-updates group with 8 updates

w3ctag/w3ctagbot #104

9.4.6 → 9.5.0 Minor PR

Closed 8 months ago 3 comments

chore(deps): Bump the astro group with 2 updates

dossierhq/dossierhq #1417

9.4.6 → 9.5.0 Minor PR

Open 8 months ago 2 comments

Bump the astro group in /app with 2 updates

poad/astro-lambda-ssr-example #263

9.4.5 → 9.5.0 Minor PR

Merged 8 months ago

chore(deps): bump the astro group with 2 updates

go-vikunja/website #227

9.4.6 → 9.5.0 Minor PR

Closed 8 months ago 2 comments

deps(site)(deps): bump the astro group across 1 directory with 7 updates

WenzelArifiandi/ariane #192

9.4.3 → 9.5.0 Minor PR

Open 8 months ago 2 comments

chore(website): bump the minorandpatch group across 1 directory with 22 updates

GenSpectrum/dashboards #874

9.4.4 → 9.5.0 Minor PR

Closed 8 months ago 2 comments

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

Layba-khan01/Layba_DevDays #6

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

mariaterzieva12/pets-workshop #7

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

p-uma/msft-vs-code-ai-demo-atx #11

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

tadfat/ageents-in-sdlk-tad #10

9.4.3 → 9.4.6 Patch PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

asyncsaroj/pets-001 #18

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

jhandel/pet-workshop #11

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

saikirantechy/pets-updates-blrs #22

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

k4abrego/pets-workshop #8

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

magespawn/pets-workshop #9

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

multilayer/pets-workshop #9

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

hemantharya14/petupate #27

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump the npm-production group across 1 directory with 3 updates

AOCC-Org-POC-First-Phase/agents-in-sdlc-payton3RR #20

9.4.3 → 9.4.6 Patch PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

leontagore/pet-workshop #7

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

aayushkesarkar/pet_vscodedevday_workshop #6

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

minalGoel/githubWorkshop-PetsProject #21

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

build(deps): bump @astrojs/node from 9.4.2 to 9.4.5

dslmobilfunkwiki/dslwiki #75

9.4.2 → 9.4.5 Patch PR

Closed 8 months ago 2 comments

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

74th/try-pets-workshop-2 #10

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

dipti20101/codeWithCopilot #25

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

UtpalMattoo/test-repo #20

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

shrutimantri/pets-updates #23

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

SandraJEV/WorkShop-Microsoft-pet #8

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)