`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
about 10 hours ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 16 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 10 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 18 days ago • updated 10 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

View all 8 advisories

Recent PRs (filtered by: Closed , Major PRs )

RSS Feed Clear filter

chore(deps): Bump @astrojs/node from 10.1.3 to 11.0.2

thomasbergernz/re-member #26

10.1.3 → 11.0.2 Major PR

Closed about 1 month ago 2 comments

chore(deps): bump @astrojs/node from 10.1.4 to 11.0.0

SamTheGeek/sargaux.com #189

10.1.4 → 11.0.0 Major PR

Closed about 2 months ago 2 comments

Bump the all group across 1 directory with 15 updates

s-thom/linkdrop #173

9.5.5 → 10.1.4 Major PR

Closed about 2 months ago 2 comments

build(deps): bump the npm_and_yarn group across 3 directories with 18 updates

9.1.3 → 10.0.5 Major PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 5 updates

flumente/bun #71

9.1.3 → 10.0.5 Major PR

Closed 2 months ago 1 comment

Bump the all group across 1 directory with 6 updates

s-thom/linkdrop #170

9.5.5 → 10.1.3 Major PR

Closed 2 months ago 1 comment

Bump the all group across 1 directory with 32 updates

s-thom/linkdrop #163

9.5.4 → 10.1.3 Major PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 28 updates

stevewithington/daytona #2

9.5.4 → 10.0.5 Major PR

Closed 2 months ago 1 comment

Bump the astro group across 1 directory with 3 updates

navikt/tms-dokumentarkiv-to #92

9.5.5 → 10.1.4 Major PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 12 directories with 17 updates

cainbryce/bun #101

9.1.3 → 10.0.5 Major PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 10 directories with 18 updates

cainbryce/bun #99

9.1.3 → 10.0.5 Major PR

Closed 3 months ago 1 comment

Bump astro and @astrojs/node

TimCane/amandasemporium.co.uk #41

9.5.5 → 10.1.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 8 directories with 9 updates

noemiplatform/workflow #4

9.5.0 → 10.0.5 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 20 updates

Surfndez/bun #27

9.1.3 → 10.0.5 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 18 updates

Surfndez/bun #22

9.1.3 → 10.0.5 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 10 directories with 19 updates

CaffeeLake/bun #298

9.1.3 → 10.0.5 Major PR

Closed 3 months ago 4 comments

Bump the astro group across 1 directory with 4 updates

navikt/familie-ba-minside-mikrofrontend #300

9.5.4 → 10.0.6 Major PR

Closed 3 months ago 1 comment

chore(deps): bump the astro group across 1 directory with 2 updates

LukasClay/Limpeza #3

9.5.5 → 10.0.6 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 22 updates

ANT0071/bun #98

9.1.3 → 10.0.5 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 13 directories with 22 updates

cainbryce/bun #76

9.1.3 → 10.0.5 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 21 updates

CaffeeLake/bun #279

9.1.3 → 10.0.5 Major PR

Closed 4 months ago 2 comments

Bump @astrojs/node from 9.5.4 to 10.0.5

navikt/familie-ba-minside-mikrofrontend #286

9.5.4 → 10.0.5 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

egeuysall/bri #11

9.5.5 → 10.0.6 Major PR

Closed 4 months ago 2 comments

build(deps): bump the npm_and_yarn group across 5 directories with 7 updates

Surfndez/starlight #2

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 23 updates

CaffeeLake/bun #277

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 2 comments

Bump the npm_and_yarn group across 14 directories with 22 updates

bitamarghzar/bun #80

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 18 updates

CaffeeLake/bun #270

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 18 updates

ANT0071/bun #91

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 19 updates

nssuwan186-dev/bun #9

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 20 updates

flumente/bun #13

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 19 updates

CaffeeLake/bun #258

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 18 updates

trizist/bun #109

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 20 updates

Surfndez/bun #1

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 14 directories with 20 updates

preechapon250/bun #35

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 20 updates

CaffeeLake/bun #257

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 2 comments

Bump the npm_and_yarn group across 15 directories with 18 updates

bitamarghzar/bun #70

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 18 updates

trizist/bun #108

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 13 directories with 20 updates

preechapon250/bun #33

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 13 directories with 21 updates

CaffeeLake/bun #254

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 2 comments

build(deps): bump the npm_and_yarn group across 11 directories with 20 updates

preechapon250/bun #29

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 19 updates

trizist/platformatic #29

9.4.4 → 10.0.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 5 updates

arcjet/examples #157

9.5.4 → 10.0.0 Major PR

Closed 4 months ago 3 comments

build(deps): bump the npm_and_yarn group across 10 directories with 20 updates

preechapon250/bun #25

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 16 directories with 16 updates

trizist/bun #96

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 5 updates

jadenblack/payload #38

9.0.0 → 10.0.0 Major PR

Closed 4 months ago 2 comments

Bump the npm-dependencies group in /frontend with 19 updates

usuyuki/usuyuki_blog_v2 #257

9.5.4 → 10.0.4 Major PR

Closed 4 months ago 1 comment

Bump the astro group with 4 updates

python/python-insider-blog #47

9.5.5 → 10.0.2 Major PR

Closed 4 months ago 3 comments

chore(deps): Bump @astrojs/node from 9.5.5 to 10.0.4

OpenClawAgent-NeoFromTheMatrix/liminal-starter #6

9.5.5 → 10.0.4 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 21 updates

milannakum/bun #7

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 21 updates

milannakum/bun #6

9.1.3 → 10.0.0 Major PR

Closed 4 months ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)