Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:15 p.m.•8 views

OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

Summary When cache interception is enabled, @opennextjs/cloudflare can interpret percent-encoded paths differently during middleware matching and cache lookup. An encoded request may fail to match authorization middleware, then be decoded into the cache key of a protected route. The cached respon...

7.5CVSS5.8AI score
SaveExploits0References7Affected Software1
Rows per page
Query Builder