[ Vendor · 1 CVEs ]
opennextjs
CVEs affecting opennextjs published in the last 30 days, plus any opennextjs CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100409 | 15 Oct 2026 | CVSS 7.5 | OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded pathsOpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on… | Fix |