A security vulnerability in Next.js was responsibly disclosed , which allows malicious actors to bypass authorization in Middleware when targeting the x-middleware-subrequest header. Vercel customers are not affected .…