`@astrojs/node`

Ecosystem:
npm

Package URL:
pkg:npm/@astrojs/node

Total PRs:
1,209 Dependabot PRs

Latest PR:
6 days ago

Unique Repositories:
493 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

GHSA-3rmj-9m5h-8fpv CVE-2026-29772 MODERATE published 3 months ago • updated about 13 hours ago

### Summary Astro's Server Islands POST handler buffers and parses the full request body as JSON without enforcing a size limit. Because `JSON.par...

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

GHSA-cj9f-h6r6-4cx2 CVE-2026-27829 MODERATE published 4 months ago • updated about 13 hours ago

## Summary A bug in Astro's image pipeline allows bypassing `image.domains` / `image.remotePatterns` restrictions, enabling the server to fetch co...

Astro has Full-Read SSRF in error rendering via Host: header injection

GHSA-qq67-mvv5-fw3g CVE-2026-25545 MODERATE published 4 months ago • updated about 13 hours ago

### Summary Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable t...

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

GHSA-jm64-8m5q-4qh8 CVE-2026-27729 MODERATE published 4 months ago • updated about 13 hours ago

## Summary Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS. A single large POST to a valid a...

Astro allows unauthorized third-party images in _image endpoint

GHSA-xf8x-j4p2-f749 CVE-2025-55303 MODERATE published 10 months ago • updated about 13 hours ago

### Summary In affected versions of `astro`, the image optimization endpoint in projects deployed with on-demand rendering allows images from unau...

View all 7 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps):(deps): bump the production-patches group with 8 updates

daggerstuff/pixelated #4086

10.1.2 → 10.1.3 Patch PR

Open 17 days ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 9 updates

heridotlife/heridotlife #157

10.1.0 → 10.1.2 Patch PR

Open 19 days ago 4 comments

chore(deps): bump the minor-and-patch group across 1 directory with 13 updates

fune-gaku/member-site-template-public #78

10.1.1 → 10.1.2 Patch PR

Closed 20 days ago 3 comments

chore(deps): bump @astrojs/node from 10.1.1 to 10.1.2

Romega-Solutions/RS_Tool-Email-Signature #15

10.1.1 → 10.1.2 Patch PR

Open 20 days ago 2 comments

chore(deps): Bump the minor-and-patch group across 1 directory with 14 updates

MinistrarePL/SimpleInvesting #7

10.1.0 → 10.1.1 Patch PR

Open 26 days ago 2 comments

build(deps): bump the astro group across 1 directory with 3 updates

navikt/sokos-utbetalingsportalen #887

10.1.0 → 10.1.1 Patch PR

Closed 28 days ago 3 comments

chore(deps): bump @astrojs/node from 10.1.0 to 10.1.1

SamTheGeek/sargaux.com #164

10.1.0 → 10.1.1 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the minor-and-patch group with 10 updates

fune-gaku/member-site-template-public #69

10.1.0 → 10.1.1 Patch PR

Open about 1 month ago 2 comments

chore(deps): Bump the minor-and-patch group with 11 updates

MinistrarePL/SimpleInvesting #4

10.1.0 → 10.1.1 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

ahliweb/sikesra #241

10.0.0 → 10.0.5 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the js-dependencies group across 1 directory with 11 updates

gruntwork-io/terragrunt #6095

10.0.4 → 10.0.6 Patch PR

Open about 1 month ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 2 updates

RayLabsHQ/gitea-mirror #285

10.0.1 → 10.0.5 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump @astrojs/node from 10.0.0 to 10.0.5

heridotlife/heridotlife #134

10.0.0 → 10.0.5 Patch PR

Closed about 1 month ago 5 comments

Bump @astrojs/node in /

SaekiTominaga/w0s.jp #1161

10.0.5 → 10.0.6 Patch PR

Closed about 2 months ago 2 comments

chore(deps): bump @astrojs/node from 10.0.5 to 10.0.6

Fork-It-Community/forkit.community #790

10.0.5 → 10.0.6 Patch PR

Open about 2 months ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 19 updates

bahua123/firefly-astro #10

9.5.4 → 9.5.5 Patch PR

Closed about 2 months ago 1 comment

chore(deps): Bump the npm-production group in /client with 4 updates

gcn-booth/template-tailspin-toys #4

10.0.5 → 10.0.6 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump @astrojs/node from 10.0.1 to 10.0.5

taxborn/taxborn.com #13

10.0.1 → 10.0.5 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 13 updates

felixicaza/astro-lqip #67

10.0.4 → 10.0.6 Patch PR

Closed about 2 months ago 1 comment

chore(deps):(deps): bump @astrojs/node from 10.0.5 to 10.0.6

daggerstuff/pixelated #567

10.0.5 → 10.0.6 Patch PR

Closed about 2 months ago 4 comments

chore(deps): bump the npm-version-updates group across 1 directory with 18 updates

zitadel/example-auth-astro #47

10.0.3 → 10.0.5 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm-version-updates group across 1 directory with 19 updates

zitadel/example-auth-astro #45

10.0.3 → 10.0.5 Patch PR

Closed 2 months ago 1 comment

Bump the all-npm-updates group with 3 updates

leo-lem/leolem.dev #256

10.0.4 → 10.0.5 Patch PR

Closed 2 months ago 1 comment

chore(deps):(deps): bump the production-patches group across 1 directory with 18 updates

daggerstuff/pixelated #521

10.0.4 → 10.0.5 Patch PR

Open 2 months ago 4 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 17 updates

daggerstuff/pixelated #515

10.0.4 → 10.0.5 Patch PR

Open 2 months ago 4 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 16 updates

daggerstuff/pixelated #511

10.0.4 → 10.0.5 Patch PR

Open 2 months ago 4 comments

chore(deps): bump @astrojs/node from 10.0.3 to 10.0.4

Fork-It-Community/forkit.community #751

10.0.3 → 10.0.4 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the minor-patch group across 1 directory with 14 updates

MichaelFisher1997/staticfish-v2 #29

10.0.3 → 10.0.4 Patch PR

Closed 2 months ago 2 comments

Bump @astrojs/node from 10.0.1 to 10.0.4

jrwnnnn/still-they-shine #55

10.0.1 → 10.0.4 Patch PR

Closed 2 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 7 updates

navikt/sokos-utbetalingsportalen #830

10.0.3 → 10.0.4 Patch PR

Closed 3 months ago 3 comments

Bump @astrojs/node from 10.0.0 to 10.0.4 in /astro-website

BunnyNabbit/voxel-telephone #178

10.0.0 → 10.0.4 Patch PR

Open 3 months ago 1 comment

chore(deps): bump @astrojs/node from 9.5.4 to 9.5.5

jirihofman/hungry-but-cannot-decide-what-to-order #141

9.5.4 → 9.5.5 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the minor-patch group with 7 updates

MichaelFisher1997/staticfish-v2 #26

10.0.3 → 10.0.4 Patch PR

Open 3 months ago 1 comment

chore(deps):(deps): bump the production-patches group across 1 directory with 26 updates

daggerstuff/pixelated #257

10.0.2 → 10.0.4 Patch PR

Open 3 months ago 2 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 24 updates

daggerstuff/pixelated #251

10.0.2 → 10.0.3 Patch PR

Open 3 months ago 2 comments

chore(deps):(deps): bump the production-patches group across 1 directory with 18 updates

daggerstuff/pixelated #234

10.0.2 → 10.0.3 Patch PR

Closed 3 months ago 3 comments

build(deps): bump the patch-updates group with 18 updates

bahua123/firefly-astro #1

9.5.4 → 9.5.5 Patch PR

Open 3 months ago 1 comment

deps(deps): bump the astro group across 1 directory with 3 updates

naujrevilo/juanoliverdotnetv3 #32

9.5.2 → 9.5.4 Patch PR

Open 3 months ago 3 comments

Bump the npm-production group in /client with 2 updates

sorrentmutie/tailspin-toys #2

9.5.2 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

chore(deps):(deps): bump the production-patches group across 1 directory with 19 updates

pixelatedempathy/pixelated #611

9.5.2 → 9.5.4 Patch PR

Open 4 months ago 3 comments

Bump the npm-production group in /client with 2 updates

nickwestbrook/pets-workshop #2

9.5.2 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the npm-production group in /client with 2 updates

cajetzer/copilot-cli-workshop #2

9.5.2 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump @astrojs/node from 9.5.3 to 9.5.4

Open-Paws/c4c-campus-website #91

9.5.3 → 9.5.4 Patch PR

Open 4 months ago 2 comments

chore(deps):(deps): bump the production-patches group with 22 updates

pixelatedempathy/pixelated #596

9.5.2 → 9.5.4 Patch PR

Open 4 months ago 4 comments

chore(deps): bump @astrojs/node from 9.5.3 to 9.5.4

duongcamcute/VF-Dashboard-VH #4

9.5.3 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump @astrojs/node from 9.5.3 to 9.5.4

Trombach/astro-homepage #972

9.5.3 → 9.5.4 Patch PR

Open 4 months ago 4 comments

chore(deps): bump @astrojs/node from 9.5.3 to 9.5.4

minhmaymanne/vf #5

9.5.3 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

chore(deps): Bump the astro group with 2 updates

dossierhq/dossierhq #1533

9.5.3 → 9.5.4 Patch PR

Open 4 months ago 2 comments

Bump the minor-and-patch group across 1 directory with 5 updates

navikt/sokos-up-skattekort-ssr #41

9.5.3 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

Bump the patch-updates group with 18 updates

luoPROMAX/Mizuki #7

9.5.1 → 9.5.4 Patch PR

Closed 4 months ago 1 comment

Package Details

Name:	`@astrojs/node`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/@astrojs/node`
JSON API:	View JSON

Security Advisories

7

Active advisories

MODERATE 7

View All npm Advisories

Package Information

Description:

Deploy your site to a Node.js server

Repository:	https://github.com/withastro/astro
Homepage:	https://docs.astro.build/en/guides/integrations-guide/node/
Latest Release:	`9.2.2` about 1 year ago
Dependent Repos:	1,089
Dependent Packages:	29
Downloads:	503,259
Ranking:	Top 0.5707% by dependent repos Top 0.7457% by downloads Top 1.1871% by dependent pkgs

PR Status

Open 565 (46.7%)

Merged 82 (6.8%)

Closed 540 (44.7%)

PR Types

Major 144 (11.9%)

Minor 697 (57.7%)

Patch 346 (28.6%)