Opennextjs Opennext For Cloudflare
2 CVEs affecting Opennextjs Opennext For Cloudflare. Latest disclosed: 2026-03-04. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-6087 | Critical | 9.1 | 2025-06-16 | A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package. The vulnerability stems from an unimplemented feature… |
CVE-2026-3125 | Medium | 6.5 | 2026-03-04 | A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, resulting from a path normalization bypass in the /cdn… |