opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass
High severity
GitHub Reviewed
Published
Mar 4, 2026
in
opennextjs/opennextjs-cloudflare
•
Updated Mar 5, 2026
Give feedback on Dependabot alerts