npm/@astrojs/node

Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands

Modified: 3/30/2026

@astrojs/node's trailing slash handling causes open redirect issue

Modified: 8/15/2025

Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed

Modified: 5/5/2026

Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize

Modified: 2/28/2026

Astro has memory exhaustion DoS due to missing request body size limit in Server Actions

Modified: 2/25/2026

Astro has Full-Read SSRF in error rendering via Host: header injection

Modified: 3/30/2026

@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect

Modified: 8/12/2026

Astro allows unauthorized third-party images in _image endpoint

Modified: 11/27/2025