@astrojs/cloudflare vulnerabilities (npm)

2 vulnerabilities.

• @astrojs/cloudflare npm @astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpoint CVE-2026-41321 Fix available 2.2 LowApril 23, 2026
• @astrojs/cloudflare npm Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpoint CVE-2025-58179 Public exploitFix available 7.2 HighSeptember 4, 2025