next js security vulnerability reddit