gatsby

5.16.1 · 10 Feb 2026MIT252.9k / weekRepository Homepage npm Atom feed

Your version

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Line	Newest	Where it stands
	5.16.1	Safe from 5.9.1
	4.25.9	16 open advisories, worst moderate · last release May 2024, no longer updated

Moderate
Gatsby develop server has Local File Inclusion vulnerabilityGHSA-c6f8-8r25-c4gc · 9 Jun 2023
fixed in 5.9.1, 4.25.7

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 28 Oct 2026. Releases and advisories last read 28 Oct 2026.