Next.js Security Meltdown: 13 CVEs, Middleware Bypass, SSRF
Vercel patched 13 Next.js CVEs in May 2026 — including middleware auth bypasses, SSRF credential theft, and a React Flight DoS. Here's what ...
TypeScript, Node.js, React, npm, and frontend development