Lame Brown Dev https://lamebrown.dev/blog He warned us not to confuse popularity with correctness. I listened. I admired. And then I shipped a React app anyway. This site is my quiet apology -> typed, not typeset | A tribute to Knuth en-us salman@felic.io (Salman) salman@felic.io (Salman) Fri, 14 Mar 2025 00:00:00 GMT https://lamebrown.dev/blog/cve-2025-29927-nextjs-middleware-auth Why Middleware-Only Auth in Next.js Is Still Dangerous (Lessons From the CVE-2025-29927 Bypass) https://lamebrown.dev/blog/cve-2025-29927-nextjs-middleware-auth CVE-2025-29927 let attackers bypass Next.js middleware with a single header. If your auth lives only in middleware you were wide open. Here is what happened and how to fix it properly. Fri, 14 Mar 2025 00:00:00 GMT salman@felic.io (Salman) next.jssecurity