Skip to content
OpenAdvisories

Product · withastro

@astrojs/cloudflare

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.2
    CVE-2026-41321

    @astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpoint

    @astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the fetch() call for remote images in packages/integrations/cloudflare/src/utils/image-binding-transform.ts uses the default redirect: 'follow' behavior. This all…

    withastro @astrojs/cloudflare @astrojs/cloudflare npm