Jan 11 · 14 min read · Introduction In January 2025, security researchers Rachid and Yasser Allam uncovered a critical vulnerability in Next.js that sent shockwaves through the web development community. CVE-2025-29927, a middleware authorization bypass flaw, affects one o...
Join discussion
Apr 4, 2025 · 3 min read · Introduction On March 21st, 2025, the Next.js maintainers announced a critical authorization bypass vulnerability – CVE-2025-29927. This vulnerability is easily exploitable, allowing attackers to bypass authorization mechanisms. In some instances, it...
Join discussion
Mar 23, 2025 · 5 min read · Introduction Security vulnerabilities in popular frameworks can have far-reaching consequences. Recently, the Next.js team disclosed a significant security vulnerability (CVE-2025-29927) that affects self-hosted Next.js applications. This vulnerabili...
Join discussion