TI-2026-74651 CVE-2026-100409 · GHSA-2vc4-c4r6-p6v6
Cache interception in OpenNext Cloudflare bypasses middleware checks
Priority LOW 39
OpenNext Cloudflare is an open Next.js adapter for Cloudflare.
Vulnerabilities
3 records
TI-2026-02700 CVE-2026-3125 · GHSA-c7mq-gh6q-6q7c
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass
Priority MEDIUM 40
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn-cgi/image/ handler.The @opennextjs/cloudflare worker templat…
TI-2025-05497 CVE-2025-6087 · GHSA-rvpw-p7vw-wj3m
SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint
Priority MEDIUM 42
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package.