CVE-2025-29927: Next.js remediation · Delivery tracking

A protected route returns application data without the expected middleware authorization decision. Confirm the exposure, contain the affected workload, and validate a patched rollout.

Jamie Engineering lead · 02:13 a.m.

Delivery tracking / af-south. Investigate next, restore service, and verify the result.