@astrojs/node vulnerabilities (npm)
9 vulnerabilities.
-
@astrojs/nodenpm Astro: Malformed port in the Host header can crash the Node adapter 8.2 High -
@astrojs/nodenpm @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect 2.1 Low -
@astrojs/nodenpm @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed 5.3 Medium -
@astrojs/nodenpm Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands 5.9 Medium -
@astrojs/nodenpm Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize 6.5 Medium -
@astrojs/nodenpm Astro has memory exhaustion DoS due to missing request body size limit in Server Actions 5.9 Medium -
@astrojs/nodenpm Astro has Full-Read SSRF in error rendering via Host: header injection 6.9 Medium -
@astrojs/nodenpm Unauthorized third-party images in Astro’s _image endpoint 6.9 Medium -
@astrojs/nodenpm @astrojs/node's trailing slash handling causes open redirect issue 5.5 Medium