In this CVE blog, we explore a vulnerability in Next.js stemming from the improper trust of the x-middleware-subrequest header.
The post CVE-2025-29927: Next.js Middleware Authorization Bypass appeared first on OffSec.
This article has been indexed from OffSec