https://vulert.com/blog/critical-nextjs-vulnerability/