Tag: next.js

1 Attack Reports | 0 Vulnerabilities

Attack reports

CVE-2025-29927: Next.js Middleware Authorization Bypass Flaw

A critical vulnerability, CVE-2025-29927, with a CVSS score of 9.1 was disclosed on March 21, 2025. This flaw allows attackers to bypass authorization checks in Next.js Middleware, potentially granting unauthorized access to protected resources. The vulnerability affects applications using Middlewa…
vulnerability
CVE-2025-29927
2025-03-27
next.js
authorization bypass
javascript framework
Published: March 27, 2025
Linked vulnerabilities : CVE-2025-29927 (CVSS 9.1)
Downloadable IOCs: 0
Click here to see more Attack Reports