Skip to content
All lessons

Tech Insights· vercel.com

Protection against Next.js CVE-2025-29927

From vercel.com

A security vulnerability in Next.js was responsibly disclosed, which allows malicious actors to bypass authorization in Middleware when targetting the x-middleware-subrequest header.

Shared by Raí Siqueira

Read on vercel.com

Book a call

Lessons like this one
shape how we build.

Tell us what you’re building. In one call, we’ll show you how our team would approach it.

Tell us what you’re building, and we’ll show you how we’d approach it.

Still prefer the good old email? Contact us