Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/%40astrojs/node@10.0.1
purl pkg:npm/%40astrojs/node@10.0.1
Next non-vulnerable version 10.0.5
Latest non-vulnerable version 10.0.5
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6u1w-y61g-kyeq
Aliases:
CVE-2026-41322
GHSA-c57f-mm3j-27q9
@astrojs/node allows Astro to deploy your SSR site to Node targets. Prior to 10.0.5, requesting a static js/css resources from _astro path with an incorrect/malformed if-match header returns a 500 error with a one year cache lifetime instead of 412 in some cases. This has the effect that all subsequent requests to that file, regardless of if-match header will be served a 5xx error instead of the file until the cache expires. This vulnerability is fixed in 10.0.5.
10.0.5
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T22:12:41.210428+00:00 GitLab Importer Affected by VCID-6u1w-y61g-kyeq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/@astrojs/node/CVE-2026-41322.yml 38.6.0