New security vulnerabilities disclosed in Next.js (patches released)