How to find Next.js on your network
SMRTR summary
A severe authentication bypass flaw in Next.js middleware requires users to upgrade to versions 15.2.3 or 14.2.25, or filter the 'x-middleware-subrequest' header to prevent remote attacks that could bypass security checks.
SMRTR provides this summary for quick context. The original article belongs to Lobsters.
Read the original article