`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated 2 minutes ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 20 days ago • updated 12 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 1 minute ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 6 months ago • updated 1 minute ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 1 minute ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

View all 8 advisories

Recent PRs (filtered by: Open )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 11 directories with 6 updates

jadenblack/payload #5

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 25 directories with 7 updates

thegoodeth12/payload #2

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 25 directories with 8 updates

jadenblack/payload #3

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 26 directories with 9 updates

thegoodeth12/payload #1

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 25 directories with 8 updates

CakekritsananXi/payload #4

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): bump the npm_and_yarn group across 26 directories with 8 updates

CakekritsananXi/payload #3

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.3.0 to 9.4.1 in /client

chrisreddington/agents-in-sdlc-sonnet4-test #2

9.3.0 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 13 updates

arcjet/arcjet-docs #610

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 4 comments

build(deps): bump @astrojs/node from 9.0.0 to 9.4.1

webflow/s1ngularity-repository-acepa #8

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

chore(website): bump the minorandpatch group across 1 directory with 12 updates

GenSpectrum/dashboards #783

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump the npm_and_yarn group across 1 directory with 2 updates

jackkershaw/portfolio #57

9.1.3 → 9.4.1 Minor PR

Open 12 months ago

chore(deps): Bump the arcjet-apps-minor group across 1 directory with 12 updates

arcjet/arcjet-docs #607

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 4 comments

Bump the minor-updates group across 1 directory with 7 updates

LorienYang/SakurinBlog #5

9.3.0 → 9.4.3 Minor PR

Open 12 months ago 1 comment

Bump the patch-updates group across 1 directory with 13 updates

RaitonRed/raiton-void #22

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

build(deps): bump the minor-and-patch group across 1 directory with 8 updates

navikt/sokos-utbetalingsportalen #602

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.0.0 to 9.0.3

adurite-network/Adurite #17

9.0.0 → 9.0.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.2.2 to 9.4.3 in /client

pjbhakta-outlook/SDLC-FY26 #17

9.2.2 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.3.0 to 9.4.3

elchiconube/faedo-digital #31

9.3.0 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

gprathyu8/pets-updates #12

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

saket22-hub/pets-adoption #11

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

build(deps): bump @astrojs/node from 9.2.1 to 9.4.3

Project37/travislolsite #33

9.2.1 → 9.4.3 Minor PR

Open 12 months ago

chore(deps): bump the minor group across 1 directory with 12 updates

loculus-project/loculus #4894

9.3.2 → 9.4.3 Minor PR

Open 12 months ago 1 comment

chore(website): bump the minorandpatch group in /website with 10 updates

GenSpectrum/dashboards #777

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.0.0 to 9.4.1

adurite-network/Adurite #12

9.0.0 → 9.4.1 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

minalGoel/githubWorkshop-PetsProject #10

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.3.0 to 9.4.3

Cribac/dogear #370

9.3.0 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.3.0 to 9.4.3 in /client

gurveernagarro/ss #6

9.3.0 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

nitesh624/pets-updates #11

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

chore(deps): bump the astro group with 3 updates

Trombach/astro-homepage #897

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 2 comments

chore(deps): bump the npm-version-updates group across 1 directory with 7 updates

zitadel/example-auth-astro #4

9.4.0 → 9.4.3 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.4.2 to 9.4.3

cobaltwebtech/marzellusco-prod #123

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

shaikafzalhussain/petshop #12

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

Devhn-123/pets-updates #10

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump the patch-updates group across 1 directory with 14 updates

RaitonRed/raiton-void #20

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

jayeshkorade/pet-updates #7

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

warmachine028/pets-updates #17

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump the all-npm-updates group with 5 updates

leo-lem/leolem.dev #113

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

TangellaMadhav/pets-updates #15

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

chore(deps): bump @astrojs/node from 9.4.0 to 9.4.3

NABI-SNU/homepage #78

9.4.0 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.0.0 to 9.4.3

hkbertoson/astro-turnstile #234

9.0.0 → 9.4.3 Minor PR

Open 12 months ago

build(deps): bump the minor-and-patch group across 1 directory with 6 updates

navikt/sokos-utbetalingsportalen #600

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

JanhaviThikekar/pets-updates #10

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

chore(deps): bump the astro group with 4 updates

go-vikunja/website #176

9.4.2 → 9.4.3 Patch PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

LN-simhan/github-mongodb-pets-workshop #10

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump the minor-updates group with 6 updates

w3ctag/w3ctagbot #79

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3 in /client

sudhakar-phd/pets-updates #11

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.1.3 to 9.4.3

Phu404fake/Bom #65

9.1.3 → 9.4.3 Minor PR

Open 12 months ago

Bump the npm_and_yarn group across 1 directory with 9 updates

lantanagroup/link-cloud #1077

9.2.2 → 9.4.3 Minor PR

Open 12 months ago

Bump @astrojs/node from 9.2.1 to 9.4.3

Lunar-Proxy/lunar-v1 #263

9.2.1 → 9.4.3 Minor PR

Open 12 months ago 1 comment

Bump @astrojs/node from 9.4.2 to 9.4.3

0x346e3730/clauzier.dev #188

9.4.2 → 9.4.3 Patch PR

Open 12 months ago

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)