https://www.devclass.com/development/2025/03/24/nextjs-team-fixes-vuln-that-allows-auth-bypass-when-middleware-is-used-revises-documentation-recommending-this-method/1628947
Next.js team fixes vuln that allows auth bypass when middleware is used, revises documentation...
Mar 24, 2025 - Security researchers Rachid Allam and Yasser Allam found a vulnerability in the Next.js middleware that makes it trivial […]
allows auth bypassnext jsteam
https://www.haproxy.com/blog/protecting-against-nextjs-middleware-vulnerability-cve-2025-29927-with-haproxy
Protecting against Next.js middleware vulnerability CVE-2025-29927 with HAProxy
Mar 25, 2025 - A recently discovered security vulnerability requires attention from development teams using Next.js in production environments.
next js middlewareprotecting
https://ai-sdk.dev/cookbook/next/caching-middleware
Next.js: Caching Middleware
Learn how to create a caching middleware with Next.js and KV.
next jscachingmiddleware
https://vercel.com/blog/postmortem-on-next-js-middleware-bypass
Postmortem on Next.js Middleware bypass - Vercel
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
next js middlewarepostmortem