OP
Product
opennextjs-cloudflare
by opennextjs · last CVE Oct 15, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add opennextjs-cloudflare to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3125
6.5
0%
Mar 4
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass
Affected: before 1.17.1
Showing 1