`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,215 Dependabot PRs

Latest PR:
about 12 hours ago

Unique Repositories:
496 repositories

Unique Repos (30 days):
1 repository

Security Advisories

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

GHSA-c57f-mm3j-27q9 CVE-2026-41322 MODERATE published 4 months ago • updated about 1 month ago

### Summary Requesting a static JS/CSS resource from the `_astro` path with an incorrect or malformed `if-match` header returns a `500` error with ...

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 5 months ago • updated 16 days ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 6 months ago • updated 10 days ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

GHSA-r557-wffq-wvrc CVE-2026-59730 LOW published 18 days ago • updated 10 days ago

### Impact With `trailingSlash: 'always'` configured, the `@astrojs/node` standalone server's static file handler appends a trailing slash to requ...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 5 months ago • updated about 1 month ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

View all 8 advisories

Recent PRs (filtered by: Open , Minor PRs )

RSS Feed Clear filter

fix(deps): bump the web-minor-patch group across 2 directories with 12 updates

mlorentedev/kubelab #628

9.4.4 → 9.5.5 Minor PR

Open about 2 months ago 2 comments

chore(deps): bump the npm-minor-patch group across 1 directory with 19 updates

ericmikkelsen/starter-astro-sanity #39

10.0.6 → 10.1.4 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 18 updates

ericmikkelsen/starter-astro-sanity #38

10.0.6 → 10.1.2 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the npm-minor-patch group across 1 directory with 17 updates

ericmikkelsen/starter-astro-sanity #37

10.0.6 → 10.1.1 Minor PR

Open 3 months ago 1 comment

chore(deps): Bump the astro group with 2 updates

dossierhq/dossierhq #1656

10.0.6 → 10.1.0 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the minor-and-patch group with 14 updates

fune-gaku/member-site-template-public #53

10.0.6 → 10.1.0 Minor PR

Open 3 months ago 2 comments

Bump the all-npm-updates group with 7 updates

leo-lem/leolem.dev #264

10.0.6 → 10.1.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 15 directories with 17 updates

CaffeeLake/bun #199

9.1.3 → 9.5.4 Minor PR

Open 5 months ago 1 comment

Bump the npm_and_yarn group across 16 directories with 16 updates

CaffeeLake/bun #184

9.1.3 → 9.5.4 Minor PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates

amboss-mededu/payload #11

9.0.0 → 9.5.4 Minor PR

Open 5 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 2 updates

jadenblack/payload #18

9.0.0 → 9.5.4 Minor PR

Open 5 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 12 directories with 2 updates

jadenblack/payload #16

9.0.0 → 9.5.4 Minor PR

Open 5 months ago 2 comments

chore(deps-dev): bump @astrojs/node from 9.4.3 to 9.5.4

okikio/okikio #18

9.4.3 → 9.5.4 Minor PR

Open 5 months ago 2 comments

Bump the npm_and_yarn group across 19 directories with 24 updates

trizist/bun #35

9.1.3 → 9.4.1 Minor PR

Open 7 months ago 1 comment

chore(website): bump the minorandpatch group across 1 directory with 31 updates

GenSpectrum/dashboards #972

9.4.4 → 9.5.1 Minor PR

Open 8 months ago 4 comments

chore(website): bump the minorandpatch group across 1 directory with 30 updates

GenSpectrum/dashboards #936

9.4.4 → 9.5.1 Minor PR

Open 8 months ago 1 comment

⬆️ Bump @astrojs/node from 9.0.0 to 9.4.1

navikt/aap-min-side-microfrontend #117

9.0.0 → 9.4.1 Minor PR

Open 9 months ago 2 comments

build(deps): bump @astrojs/node from 9.1.2 to 9.4.1

dewodt/portfolio #19

9.1.2 → 9.4.1 Minor PR

Open 9 months ago 1 comment

chore(website): bump the minorandpatch group across 1 directory with 27 updates

GenSpectrum/dashboards #899

9.4.4 → 9.5.0 Minor PR

Open 9 months ago 2 comments

chore(frontend)(deps): update @astrojs/node requirement from ^9.4.3 to ^9.5.0 in /frontend

Whyknot-live/whyknot.live #8

^9.4.3 → ^9.5.0 Minor PR

Open 10 months ago 1 comment

deps(site)(deps): bump the astro group across 1 directory with 6 updates

WenzelArifiandi/ariane #215

9.4.3 → 9.5.0 Minor PR

Open 10 months ago 4 comments

chore(deps): bump the production-dependencies group across 1 directory with 21 updates

pixelatedempathy/pixelated #101

9.4.6 → 9.5.0 Minor PR

Open 10 months ago 1 comment

deps(site)(deps): bump the astro group across 1 directory with 8 updates

WenzelArifiandi/ariane #205

9.4.3 → 9.5.0 Minor PR

Open 10 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 17 updates

pixelatedempathy/pixelated #94

9.4.6 → 9.5.0 Minor PR

Open 10 months ago 1 comment

chore(deps): Bump the astro group with 2 updates

dossierhq/dossierhq #1417

9.4.6 → 9.5.0 Minor PR

Open 10 months ago 2 comments

deps(site)(deps): bump the astro group across 1 directory with 7 updates

WenzelArifiandi/ariane #192

9.4.3 → 9.5.0 Minor PR

Open 10 months ago 2 comments

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

SiddhaK17/vscode_workshop #6

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

chore(deps): bump the patch-minor group across 1 directory with 13 updates

ebarcly/astragarde #37

9.2.2 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

mairaw/pets-workshop-test #8

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

claytonsy8888/msft_workshop_repository #10

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

ayanomt/pets-workshop #7

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Atharva-tech046/VS_code_batch_02 #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

ShriGunjal/pets_git #18

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

BrianBahk/VSCODEDevDayDemo #7

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

LN-simhan/github-mongodb-pets-workshop #16

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

kishanmundha/pets-workshop #7

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

KishoreRajesh/pets-adoption #17

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Layba-khan01/Layba_DevDays #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

neehhaa/microsoft-workshop #4

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

chai127/vscode_dev #2

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Vaishnavi-M-1909/vscode_batch2 #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

JeffRodrix-bot/workshop #2

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

rajkirankeer99/pet_vscode #4

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

neo1parekh/Vin-vscodemumbai #4

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

adityacoder2005/Vscodedevday #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Vedant14K/vscodedevs_2025 #3

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

sahilbhosale63/pet_vscodedevday #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

mechdeveloper/pet-vsdevday #7

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

Harshh212/vsCodeDevDaysWorkShop #5

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Bump @astrojs/node from 9.1.3 to 9.4.4 in /client

AyushJha2008/Pet_vscodedevday #3

9.1.3 → 9.4.4 Minor PR

Open 10 months ago

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

8

Active advisories

MODERATE 7

LOW 1

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 566 (46.6%)

Merged 82 (6.7%)

Closed 545 (44.9%)

PR Types

Major 148 (12.2%)

Minor 697 (57.4%)

Patch 348 (28.6%)