Vercel knew critical NextJS security vulnerability 5 days before disclosing it
twitter.com