{"schema":"vulnpedia.research/1","cve":"CVE-2026-100409","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6","tags":["x_refsource_CONFIRM","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6"},{"source":"nvd","sourceId":"CVE-2026-100409","modified":"2026-10-16T20:04:29.760","url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/security/advisories/GHSA-2vc4-c4r6-p6v6"}]},{"url":"https://github.com/opennextjs/opennextjs-aws/pull/1199","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","url":"https://github.com/opennextjs/opennextjs-aws/pull/1199"},{"source":"nvd","sourceId":"CVE-2026-100409","modified":"2026-10-16T20:04:29.760","url":"https://github.com/opennextjs/opennextjs-aws/pull/1199"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-aws/pull/1199"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-aws/pull/1199"}]},{"url":"https://github.com/opennextjs/opennextjs-aws/pull/1200","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","url":"https://github.com/opennextjs/opennextjs-aws/pull/1200"},{"source":"nvd","sourceId":"CVE-2026-100409","modified":"2026-10-16T20:04:29.760","url":"https://github.com/opennextjs/opennextjs-aws/pull/1200"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-aws/pull/1200"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-aws/pull/1200"}]},{"url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b"},{"source":"nvd","sourceId":"CVE-2026-100409","modified":"2026-10-16T20:04:29.760","url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/commit/38ea40b669be272ddf09a7df7e70c69d0b57404b"}]},{"url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-15T16:57:50.999Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2"},{"source":"nvd","sourceId":"CVE-2026-100409","modified":"2026-10-16T20:04:29.760","url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-cloudflare/releases/tag/@opennextjs/cloudflare@1.20.2"}]},{"url":"https://osv.dev/vulnerability/GHSA-2vc4-c4r6-p6v6","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","origins":[{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://osv.dev/vulnerability/GHSA-2vc4-c4r6-p6v6"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://osv.dev/vulnerability/GHSA-2vc4-c4r6-p6v6"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100409","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","origins":[{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100409"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-100409"}]},{"url":"https://github.com/opennextjs/opennextjs-cloudflare","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","origins":[{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://github.com/opennextjs/opennextjs-cloudflare"},{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://github.com/opennextjs/opennextjs-cloudflare"}]},{"source":"euvd","sourceId":"EUVD-2026-102200","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102200","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102200","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102200"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","url":"https://osv.dev/vulnerability/GHSA-2vc4-c4r6-p6v6","ecosystem":"npm","name":"@opennextjs/cloudflare","purl":"pkg:npm/%40opennextjs/cloudflare","ranges":[{"type":"SEMVER","events":[{"introduced":"0.3.0"},{"fixed":"1.20.2"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-2vc4-c4r6-p6v6/GHSA-2vc4-c4r6-p6v6.json"},"modified":"2026-10-15T20:30:05.349670038Z","origins":[{"source":"ghsa","sourceId":"GHSA-2vc4-c4r6-p6v6","modified":"2026-10-15T20:30:05.349670038Z","url":"https://osv.dev/vulnerability/GHSA-2vc4-c4r6-p6v6"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}