The UK’s National Cyber Security Centre has alerted users to a severe authorization bypass vulnerability in Next.js that allows unauthorized access to sensitive resources, with active exploitation reported.
View full story…