Authorization Bypass in Next.js Middleware
(github.com/advisories)
It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.
It is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.