Investigating CVE-2025-29927: Authorization Bypass in Next.js Middleware