Tag
Next.js
Safeguard articles tagged "Next.js" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Vulnerability Research
CVE-2026-100409 and GHSA-2mvv-9g7g-pfcg: Two Ways OpenNext Lost a Next.js Middleware Decision
CVE-2026-100409 and GHSA-2mvv-9g7g-pfcg let requests slip past Next.js middleware on OpenNext. Both bugs explained, versions to upgrade, and a checker.
Oct 18, 202611 min read
Best Practices
Next.js Supply Chain Security Hardening
Next.js pulls hundreds of transitive dependencies into production bundles, and the middleware auth bypass of March 2025 showed how a single framework CVE cascades across every App Router deployment. Here is the hardening playbook for 2024 and beyond.
Feb 28, 20266 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.