Skip to content

Commit cd4b3b5

Browse files
committed
updates
1 parent 238ba63 commit cd4b3b5

File tree

1 file changed

+1
-7
lines changed

1 file changed

+1
-7
lines changed

src/content/changelog/workers/2025-06-17-open-next-ssrf.mdx

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,7 @@ products:
66
date: 2025-06-17T01:00:00Z
77
---
88

9-
<<<<<<< HEAD
10-
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, which has been automatically mitigated for all Next.js apps deployed to Cloudflare that use the @opennextjs/cloudflare package.
11-
||||||| parent of 0aa4c5a3c9 (updates)
12-
A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package, which has been automatically mitigated for all existing deployments.
13-
=======
14-
Mitigations have been put in place for all existing and future deployments of sites with the Cloudflare adapter for Open Next in response to an identified Server-Side Request Forgery (SSRF) vulnerability in the `@opennextjs/cloudflare` package
15-
>>>>>>> 0aa4c5a3c9 (updates)
9+
Mitigations have been put in place for all existing and future deployments of sites with the Cloudflare adapter for Open Next in response to an identified Server-Side Request Forgery (SSRF) vulnerability in the `@opennextjs/cloudflare` package.
1610

1711
The vulnerability stemmed from an unimplemented feature in the Cloudflare adapter for Open Next, which allowed users to proxy arbitrary remote content via the `/_next/image` endpoint.
1812

0 commit comments

Comments
 (0)