OP
Vendor
Opennextjs
4
CVEs
0
On KEV
1
New 30D
Products
OP7.5
opennextjs-cloudflare
opennextjs
2 CVEs0 on KEV1 new
OF9.1
Opennext For Cloudflare
Opennextjs
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-100409 | OP opennextjs-cloudflare opennextjs | 7.5 | Oct 15 | OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths |
| CVE-2026-3125 | OP @opennextjs/cloudflare opennextjs | 6.5 | Mar 4 | SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass |
| CVE-2025-6087 | OF Opennext For Cloudflare Opennextjs | 9.1 | Jun 16 | SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint |