Next.js has fixed a major security vulnerability that required priority attention