Next.js security patch