Skip to content

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

Low severity GitHub Reviewed Published Apr 20, 2026 in withastro/astro • Updated Apr 27, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts