Security: opennextjs/opennextjs-cloudflare
Security Advisories
View information about security vulnerabilities from this repository's maintainers.
-
Cache interception can bypass middleware protection for encoded pathsGHSA-2vc4-c4r6-p6v6 published
Jul 21, 2026 by james-elicxHigh -
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypassGHSA-c7mq-gh6q-6q7c published
Mar 4, 2026 by petebacondarwinHigh -
SSRF vulnerability in opennextjs-cloudflare via /_next/image endpointGHSA-rvpw-p7vw-wj3m published
Jun 16, 2025 by vicbHigh