TI-2025-05497 CVE-2025-6087 · GHSA-rvpw-p7vw-wj3m
SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint
Priority MEDIUM 42
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package.
opennextjs
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
opennextjs records in CISA KEVNo opennextjs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records
TI-2026-02700 CVE-2026-3125 · GHSA-c7mq-gh6q-6q7c
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass
Priority MEDIUM 40
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.The @opennextjs/cloudflare worker templat…
TI-2026-74651 CVE-2026-100409 · GHSA-2vc4-c4r6-p6v6
Cache interception in OpenNext Cloudflare bypasses middleware checks
Priority LOW 39
OpenNext Cloudflare is an open Next.js adapter for Cloudflare.