middleware

• CVE-2026-54281 - Nest Fastify trailing-slash middleware bypass 2026-06-15
• CVE-2026-45109 - Next.js segment-prefetch middleware bypass 2026-05-10