NextJS Security Vulnerability