Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@astrojs/netlify

3 known vulnerabilities (2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 2 medium, 1 low
Registry
npm

Advisories 3

  • CVE-2026-102983Medium 6.3

    Astro: Netlify Image CDN allowlist bypass enables SSRF

    Affected: from 5.2.0, fixed in 8.2.4.

  • @astrojs/netlify generates an overly-broad Netlify Image CDN allowlist because remotePatterns.pathname metacharacters are not escaped

    Affected: fixed in 8.1.2.

  • CVE-2026-54300Medium 5.3

    @astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config

    Affected: fixed in 7.0.13.