OP
Product
opennextjs-cloudflare
2
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add opennextjs-cloudflare to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100409 | 7.5 | Oct 15 | OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths Affected: >= 0.3.0, < 1.20.2 |
| CVE-2026-3125 | 6.5 | Mar 4 | SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass Affected: before 1.17.1 |
Showing 2