Next.js security advisory fixed & more