Vulnerability in sonicjs project #683
Description
While working on sonicjs project, I discovered a vulnerability in the @opennextjs/cloudflare package (CVE-2026-3125). The issue is caused by a path normalization bypass in the /cdn-cgi/image handler. By using a backslash () instead of a forward slash (/) in the request path, an attacker can bypass Cloudflare edge interception and make the Worker fetch arbitrary remote URLs.