13 Next.js security advisories: which ones break middleware auth and the exact versions that fix them

13 Next.js security advisories: which ones break middleware auth and the exact versions that fix them Summary. In early May 2026, Vercel published 13 security advisories against Next.js in one coordin