opennextjs vulnerabilities

2 published CVEs name opennextjs among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 2Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-100409
OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
opennextjs · opennextjs-cloudflare
High7.5
CVE-2026-3125
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass
opennextjs · @opennextjs/cloudflare
High7.7

Products with the most CVEs

Most common weaknesses