CVE-2026-102983: @astrojs/netlify Allows SSRF via Insecure Image CDN Allowlist
Summary
CVE-2026-102983: Astro: Netlify Image CDN allowlist bypass enables SSRF. Affects @astrojs/netlify versions >= 5.2.0, < 8.2.4. Fixed in 8.2.4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @astrojs/netlify package is an adapter for the Astro framework that enables seamless integration with Netlify services, including image handling through the Netlify Image CDN. This package allows developers to specify allowed image domains to enhance security when fetching images from external sources. However, a vulnerability exists that can lead to Server-Side Request Forgery (SSRF) due to improper validation of allowed image sources.
Vulnerability Detail
The vulnerability arises from the way the @astrojs/netlify adapter generates regular expressions for the Netlify Image CDN remote-image allowlists. These expressions are not anchored to the beginning of the URL, allowing an attacker to craft a URL that includes an allowed origin in its query string or path. For instance, a URL like 'http://127.0.0.1:6379/?url=https://images.example.com/image.png' could be accepted, leading to the Netlify Image CDN fetching content from an internal service instead of the intended external source. This can expose internal services to unauthorized access, depending on the network-level protections in place.
How To Fix
Latest published version: 8.2.10 as of 23 Oct 2026
npm install @astrojs/netlify@8.2.10Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
8.2.4
This is the first release that contains the fix.
npm install @astrojs/netlify@8.2.4Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Before upgrading, you can disable the Netlify Image CDN by adding the following configuration in your adapter settings: imageCDN: false. Alternatively, you can remove any remote image allowlist entries to mitigate the risk temporarily.
Conclusion
The @astrojs/netlify package has a vulnerability that allows SSRF due to improper validation of image source allowlists. It is crucial to upgrade to version 8.2.4 or later to mitigate this risk. Additionally, using tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for @astrojs/netlify →
FAQ
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially leading to unauthorized access or data exposure.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. You can check if your application is affected by this vulnerability using the Vulert playground at Vulert Scanner without any signup.
An unauthenticated attacker could exploit this vulnerability to bypass the configured image allowlist, potentially probing or accessing internal services, depending on the network protections in place.
No confidentiality or integrity impact has been demonstrated with this vulnerability, as the Image CDN attempts to transform responses as images, limiting direct response exfiltration.
The CVSS score of this vulnerability is 6.3, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for @astrojs/netlify.
