All products

@astrojs/netlify

npm · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Astro: Netlify Image CDN allowlist bypass enables SSRFCVE-2026-102983 · GHSA-4233-JC72-56C5 @astrojs/netlify npm Medium Fix reported
@astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escapedCVE-2026-73425 · GHSA-HP3V-MFQW-H74C @astrojs/netlify npm Low Fix reported
@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN configCVE-2026-54300 · GHSA-529G-XQ4F-CW38 @astrojs/netlify npm Medium Fix reported