All products

@astrojs/cloudflare

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)CVE-2026-41321 · GHSA-88GM-J2WX-58H6 @astrojs/cloudflare npm Low Fix reported
Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapterCVE-2025-58179 · GHSA-QPR4-C339-7VQ8 @astrojs/cloudflare npm High Fix reported