AIKIDO-2026-10972
@astrojs/internal-helpers is vulnerable to Server-Side Request Forgery (SSRF)
65
Medium Risk
This Affects:
@astrojs/internal-helpersTL;DR
The isRemotePath() helper in @astrojs/internal-helpers/path classifies image href values for Astro's /_image pipeline. Before the fix, URL-encoded or literal control characters immediately after a leading slash caused the helper to treat the value as a local path. Downstream image handling could then follow protocol-relative or remote targets and bypass configured image.domains and image.remotePatterns restrictions. The patch replaces the negative slash check with a positive allowlist so control characters no longer bypass remote-path detection.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@astrojs/internal-helpers is vulnerable to Server-Side Request Forgery (SSRF) in versions 0.7.4 - 0.9.0.
How to fix this
Upgrade the @astrojs/internal-helpers library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant