Securing Middleware Against Authentication Bypasses

Published on April 13, 2025
In early 2025, a critical security vulnerability (CVE-2025-29927) was discovered in Next.js middleware that allowed attackers to bypass authorization controls...