Cpe:2.3:a:opennext:opennextjs_cloudflare:*:*:*:*:*:*:*:*

The @opennextjs/cloudflare component contains a vulnerability (CVE-2026-100409) where inconsistent path decoding allows attackers to bypass middleware-based authorization and retrieve cached content.