'Next.js has published 16 security advisories since 2016' - https://nextjs.org/blog/cve-2025-29927 https://nextjs.org/blog/cve-2025-29927 At first read that so

'Next.js has published 16 security advisories since 2016' - https://nextjs.org/blog/cve-2025-29927 https://nextjs.org/blog/cve-2025-29927 At first read that sounds very reasonable! But then you realize that not all vulnerabilities got a security advisory...