{"id":170399513,"number":"9.5.3","published_at":"2026-02-11T19:25:27.534Z","licenses":"MIT","integrity":"sha512-72jrSn0XtrD7COJVO6TxJmyU1yXdYK7MDdN/+fhqhf4YOhxuIPHclkXrJs8FbLCMx5ur56d/1ijX4XBeneqyXQ==","status":null,"download_url":"https://registry.npmjs.org/@astrojs/node/-/node-9.5.3.tgz","registry_url":"https://www.npmjs.com/package/@astrojs/node/v/9.5.3","documentation_url":null,"install_command":"npm install @astrojs/node@9.5.3","immutable":null,"metadata":{"deprecated":null,"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8fa39563-5134-45fc-abd2-82db6577192b"}},"dist":{"integrity":"sha512-72jrSn0XtrD7COJVO6TxJmyU1yXdYK7MDdN/+fhqhf4YOhxuIPHclkXrJs8FbLCMx5ur56d/1ijX4XBeneqyXQ==","shasum":"26b8af1fd1628e8be5f267782b922ee7d2519ce2","tarball":"https://registry.npmjs.org/@astrojs/node/-/node-9.5.3.tgz","fileCount":25,"unpackedSize":32450,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@astrojs%2fnode@9.5.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQCy5DfINuimzM9oFl+o7F0WaTFbx8JoOMXjJHTpJfoiOQIgCWkJRrECEcAXXCN06z76IwZWamo+3W5sq553XffOPjI="}]},"gitHead":null,"main":null,"scripts":{"dev":"astro-scripts dev \"src/**/*.ts\"","build":"astro-scripts build \"src/**/*.ts\" \u0026\u0026 tsc","build:ci":"astro-scripts build \"src/**/*.ts\"","test":"astro-scripts test \"test/**/*.test.js\""},"_npmVersion":"11.6.2","_nodeVersion":"24.13.0","_hasShrinkwrap":false,"directories":{},"engines":null,"exports":{".":"./dist/index.js","./server.js":"./dist/server.js","./preview.js":"./dist/preview.js","./package.json":"./package.json"},"browserify":null},"created_at":"2026-02-11T20:12:08.669Z","updated_at":"2026-02-18T01:11:24.252Z","purl":"pkg:npm/%40astrojs/node@9.5.3","related_tag":null,"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@astrojs%2Fnode/versions/9.5.3","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@astrojs%2Fnode/versions/9.5.3/codemeta","dependencies":[{"id":1885650370,"ecosystem":"npm","package_name":"send","requirements":"^1.2.1","kind":"runtime","optional":false},{"id":1885650371,"ecosystem":"npm","package_name":"server-destroy","requirements":"^1.0.1","kind":"runtime","optional":false},{"id":1885650372,"ecosystem":"npm","package_name":"@astrojs/internal-helpers","requirements":"0.7.5","kind":"runtime","optional":false},{"id":1885650373,"ecosystem":"npm","package_name":"@types/node","requirements":"^22.10.6","kind":"Development","optional":false},{"id":1885650374,"ecosystem":"npm","package_name":"@types/send","requirements":"^0.17.6","kind":"Development","optional":false},{"id":1885650475,"ecosystem":"npm","package_name":"@types/server-destroy","requirements":"^1.0.4","kind":"Development","optional":false},{"id":1885650476,"ecosystem":"npm","package_name":"cheerio","requirements":"1.1.2","kind":"Development","optional":false},{"id":1885650477,"ecosystem":"npm","package_name":"devalue","requirements":"^5.6.2","kind":"Development","optional":false},{"id":1885650478,"ecosystem":"npm","package_name":"express","requirements":"^4.22.1","kind":"Development","optional":false},{"id":1885650479,"ecosystem":"npm","package_name":"fastify","requirements":"^5.7.0","kind":"Development","optional":false},{"id":1885650480,"ecosystem":"npm","package_name":"@fastify/middie","requirements":"^9.1.0","kind":"Development","optional":false},{"id":1885650481,"ecosystem":"npm","package_name":"@fastify/static","requirements":"^9.0.0","kind":"Development","optional":false},{"id":1885650482,"ecosystem":"npm","package_name":"node-mocks-http","requirements":"^1.17.2","kind":"Development","optional":false},{"id":1885650483,"ecosystem":"npm","package_name":"astro","requirements":"5.17.2","kind":"Development","optional":false},{"id":1885650484,"ecosystem":"npm","package_name":"astro-scripts","requirements":"0.0.14","kind":"Development","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS1xaDhqLWhxanYtN200eM4AB7RX","identifiers":["GHSA-qh8j-hqjv-7m4x","CVE-2026-102984"],"url":"https://github.com/advisories/GHSA-qh8j-hqjv-7m4x","title":"Astro: Malformed port in the Host header can crash the Node adapter","severity":"HIGH","affected":true,"fixed":false,"fixed_versions":["11.1.3"]},{"uuid":"GSA_kwCzR0hTQS1yNTU3LXdmZnEtd3ZyY84ABcRf","identifiers":["GHSA-r557-wffq-wvrc","CVE-2026-59730"],"url":"https://github.com/advisories/GHSA-r557-wffq-wvrc","title":"@astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect","severity":"LOW","affected":true,"fixed":false,"fixed_versions":["11.0.2"]},{"uuid":"GSA_kwCzR0hTQS1jNTdmLW1tM2otMjdxOc4ABVrv","identifiers":["GHSA-c57f-mm3j-27q9","CVE-2026-41322"],"url":"https://github.com/advisories/GHSA-c57f-mm3j-27q9","title":"Astro: Cache Poisoning due to incorrect error handling when if-match header is malformed ","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["10.0.5"]},{"uuid":"GSA_kwCzR0hTQS0zcm1qLTltNWgtOGZwds4ABUG3","identifiers":["GHSA-3rmj-9m5h-8fpv","CVE-2026-29772"],"url":"https://github.com/advisories/GHSA-3rmj-9m5h-8fpv","title":"Astro: Memory exhaustion DoS due to missing request body size limit in Server Islands","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["10.0.0"]},{"uuid":"GSA_kwCzR0hTQS1qbTY0LThtNXEtNHFoOM4ABS2G","identifiers":["GHSA-jm64-8m5q-4qh8","CVE-2026-27729"],"url":"https://github.com/advisories/GHSA-jm64-8m5q-4qh8","title":"Astro has memory exhaustion DoS due to missing request body size limit in Server Actions","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["9.5.4"]},{"uuid":"GSA_kwCzR0hTQS1jajlmLWg2cjYtNGN4Ms4ABS0r","identifiers":["GHSA-cj9f-h6r6-4cx2","CVE-2026-27829"],"url":"https://github.com/advisories/GHSA-cj9f-h6r6-4cx2","title":"Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["9.5.4"]},{"uuid":"GSA_kwCzR0hTQS1xcTY3LW12djUtZnczZ84ABSvy","identifiers":["GHSA-qq67-mvv5-fw3g","CVE-2026-25545"],"url":"https://github.com/advisories/GHSA-qq67-mvv5-fw3g","title":"Astro has Full-Read SSRF in error rendering via Host: header injection","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["9.5.4"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@astrojs%2Fnode"}