Skip to content
OpenAdvisories

Package · npm

@astrojs/node

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-102984

    Astro: Malformed port in the Host header can crash the Node adapter

    Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught…

    withastro astro @astrojs/node npm