Server-Side Request Forgery via /_image endpoint in Astro Cloudflare adapter

Description

When using Astro’s Cloudflare adapter (@astrojs/cloudflare) configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn’t check the URLs it receives, allowing content from unauthorized third-party domains to be served.

Recommendation

Update the @astrojs/cloudflare package to the latest compatible version. Followings are version details:

• Affected version(s): >= 11.0.3, < 12.6.6
• Patched version(s): 12.6.6

References

• GHSA-qpr4-c339-7vq8
• CVE-2025-58179
• CWE-918
• CAPEC-310
• OWASP 2021-A10
• OWASP 2021-A6

Related Issues

• HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis - CVE-2026-46391
• private-ip vulnerable to Server-Side Request Forgery - CVE-2025-8020
• Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4) - CVE-2026-41321
• Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module - CVE-2025-62505

You might also like:

Exploiting Server Version Disclosure

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@astrojs/cloudflare