opennextjs vulnerabilities
2 published CVEs name opennextjs among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-100409
OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths
opennextjs · opennextjs-cloudflare
High7.5 - CVE-2026-3125
SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass
opennextjs · @opennextjs/cloudflare
High7.7