Security: opennextjs/opennextjs-cloudflare
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Cache interception can bypass middleware protection for encoded pathsGHSA-2vc4-c4r6-p6v6 published
Jul 21, 2026 by james-elicxHigh -
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypassGHSA-c7mq-gh6q-6q7c published
Mar 4, 2026 by petebacondarwinHigh -
SSRF vulnerability in opennextjs-cloudflare via /_next/image endpointGHSA-rvpw-p7vw-wj3m published
Jun 16, 2025 by vicbHigh
Learn more about advisories related to opennextjs/opennextjs-cloudflare in the GitHub Advisory Database