HIGHnpm
GHSA-c7mq-gh6q-6q7c· CVE-2025-6087, CVE-2026-3125opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass
Modified: 3/16/2026
package
npm/@opennextjs/cloudflare
pkg:npm/%40opennextjs/cloudflare
HIGHnpm
GHSA-rvpw-p7vw-wj3m· CVE-2025-6087, CVE-2026-3125OpenNext for Cloudflare (opennextjs-cloudflare) has a SSRF vulnerability via /_next/image endpoint
Modified: 3/16/2026