`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
7 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated 1 day ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated 1 day ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated 1 day ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated 1 day ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated 1 day ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs

RSS Feed

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

arturobas/pet-workshop #5

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

oquesadal-gap/vscode-workshop #4

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

Bump @astrojs/node from 9.1.3 to 9.4.6 in /client

aprildunnam/pets-workshop #3

9.1.3 → 9.4.6 Minor PR

Closed 8 months ago 1 comment

chore(deps): bump the astro group across 1 directory with 5 updates

Trombach/astro-homepage #930

9.4.3 → 9.4.4 Patch PR

Open 9 months ago 2 comments

Bump the npm-production group across 1 directory with 3 updates

teogroza/sdlc-se #11

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

SiddhaK17/vscode_workshop #6

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump the npm-production group across 1 directory with 3 updates

horihiro/pets-workshop #13

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

build(deps): bump the npm group across 1 directory with 3 updates

navikt/leesah-game #204

9.4.1 → 9.4.4 Patch PR

Open 9 months ago

chore(deps): bump the patch-minor group across 1 directory with 13 updates

ebarcly/astragarde #37

9.2.2 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

mairaw/pets-workshop-test #8

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

claytonsy8888/msft_workshop_repository #10

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump the npm-production group across 1 directory with 2 updates

GinaWangg/0922_test #18

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump the npm-production group across 1 directory with 3 updates

justinkelly/github-agents-in-sdlc #10

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

ayanomt/pets-workshop #7

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.4.3 to 9.4.4

inovex/scrumlr.io-landing-page #291

9.4.3 → 9.4.4 Patch PR

Merged 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Atharva-tech046/VS_code_batch_02 #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

ShriGunjal/pets_git #18

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

BrianBahk/VSCODEDevDayDemo #7

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

LN-simhan/github-mongodb-pets-workshop #16

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

kishanmundha/pets-workshop #7

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

deps(docs): bump the prod-deps group across 1 directory with 19 updates

dearealeo/Library #79

9.4.2 → 9.4.4 Patch PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

KishoreRajesh/pets-adoption #17

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

chore(deps): bump the patch-updates group across 1 directory with 10 updates

TheShadowEevee/blog #31

9.4.0 → 9.4.4 Patch PR

Merged 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Layba-khan01/Layba_DevDays #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

neehhaa/microsoft-workshop #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

chai127/vscode_dev #2

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Vaishnavi-M-1909/vscode_batch2 #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

JeffRodrix-bot/workshop #2

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

rajkirankeer99/pet_vscode #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

neo1parekh/Vin-vscodemumbai #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

adityacoder2005/Vscodedevday #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Vedant14K/vscodedevs_2025 #3

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

sahilbhosale63/pet_vscodedevday #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

mechdeveloper/pet-vsdevday #7

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Harshh212/vsCodeDevDaysWorkShop #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

AyushJha2008/Pet_vscodedevday #3

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

aayushkesarkar/pet_vscodedevday_workshop #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Adarsh-Naik/vs_code_dev_day #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Sakshi99677/VsCodeDay #2

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

kanhaiya-98/DEV-DAYS-MICROSOFT #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Dolphin-Syndrom/pet_vscode_workshop #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.1 in /client

mechdeveloper/pet-vsdevday #5

9.1.3 → 9.4.1 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

pranavpillai123/pet-vscodedevdays #4

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

indcoder/pet_vscodedevday #3

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

tspascoal-cb-dev/pets #5

9.1.3 → 9.4.4 Minor PR

Open 9 months ago

chore(deps): bump @astrojs/node from 8.3.4 to 9.4.4 in /apps/web in the npm_and_yarn group across 1 directory

forgepoint-dev/forgepoint #25

8.3.4 → 9.4.4 Major PR

Open 9 months ago 3 comments

Bump the patch-updates group across 1 directory with 14 updates

RaitonRed/raiton #33

9.4.2 → 9.4.4 Patch PR

Open 9 months ago

chore(deps): bump the patch-updates group across 1 directory with 9 updates

TheShadowEevee/blog #29

9.4.0 → 9.4.4 Patch PR

Closed 9 months ago 2 comments

build(deps): bump @astrojs/node from 9.4.3 to 9.4.4

jrg-tools/jorgechato.com #9

9.4.3 → 9.4.4 Patch PR

Open 9 months ago

chore(deps): bump @astrojs/node from 9.3.3 to 9.4.4

jrg-tools/chef-khi #12

9.3.3 → 9.4.4 Minor PR

Open 9 months ago

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)