Three Next.js vulnerabilities (CVE-2026-64645, CVE-2026-64649, CVE-2026-64642) enable Server-Side Request Forgery and middleware bypass. Patch now.
#Nextjs #SSRF #CVE202664645 #WebSecurity #Vercel
http://securityonline.info/nextjs-vulnerabilities-ssrf/?utm_source=mastodon&utm_medium=jetpack_social