Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
5 matching records.
-
OpenNext Cloudflare is an open Next.js adapter for Cloudflare.
OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on middleware for access control, and have a matching cached protected route process…
-
BentoPDF is a privacy-focused PDF toolkit that runs in the browser.
BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameResolvesToPrivate(), as used by…
-
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by…
PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connecting-ip header. Attackers who know a victim's public…
-
Backstage is an open framework for building developer portals.
Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by insufficient audience validation in the cloudflare…
-
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions.
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Cloudflare&limit=100. RSS for this section: feed.xml.